General

  • Target

    efaaa95d913b59c5136cf4bdcf665c95.bin

  • Size

    72KB

  • MD5

    efaaa95d913b59c5136cf4bdcf665c95

  • SHA1

    62d47d06bd05a30479b06168c3bf0999f3cccdbb

  • SHA256

    14294f20b71781643d30e576137462923b7c0778200ab14db52c5d75ae9b0cdd

  • SHA512

    cbfd824ed067d1937416879946af3fff6e6acbba63e6279c33a6722f882de10647e9c83764be35af71d3389ab2f4873ee0baac79c22329810542c93f8661e87f

  • SSDEEP

    1536:IS4MCasqCrzVNwcLHx92sGtqhBrYz7VMb+KR0Nc8QsJq39:rCasRrzVNBR92gBEz7Ve0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

90.60.51.67:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • efaaa95d913b59c5136cf4bdcf665c95.bin
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections