General

  • Target

    payload3 - copia.exe

  • Size

    72KB

  • MD5

    cf9e8183efd97d53674930e6e3737127

  • SHA1

    1ed63a411223525e3c94fb560f017de5c832d535

  • SHA256

    2088a67dfd1e008822107f30c138a6024f90d7a0d8202a51a64ab6f261c02e91

  • SHA512

    bf92f23eba23ec935ff5fa853bf1e9170cde268e897c6b0e6299eede5fa14d824226d06c3f147d3289cda4806a5cc1fd01d8f8025b4f5e1aaf5e4eff8d0377fc

  • SSDEEP

    1536:Ib2O7UisF0j9Fl9Hfxp+NLN95hSJouMb+KR0Nc8QsJq39:iNm6xb9/T+XrhaNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

35.158.159.254:19202

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload3 - copia.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections