General

  • Target

    8366b90b71748b7a1e7a9c1e90e898a90fb5b6e90f23957a79f3ed52e4eccc82

  • Size

    40KB

  • MD5

    265827af511da1b138e6658013cdab3e

  • SHA1

    4e512c0df44cb4c01fb7c42c8ec6eea6d7d04ff2

  • SHA256

    8366b90b71748b7a1e7a9c1e90e898a90fb5b6e90f23957a79f3ed52e4eccc82

  • SHA512

    4e78e064ec038e47155cdb72bfdea83ca86f06d7320b946dbd8352a64616c093270136bd3a5f07952f913e7d72ed322741e0802b71502a6833e6242f81e3171d

  • SSDEEP

    384:WWjuA2KBZXMWOJQLtcJDul/7jPJjVNUBiPFswPhpEgTgRByD215cDs:WWjNfBxUQLtcJKR7lZ+B6haByDs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.2.17:2333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8366b90b71748b7a1e7a9c1e90e898a90fb5b6e90f23957a79f3ed52e4eccc82
    .exe windows:6 windows x86 arch:x86

    af311ac67b2bc492049f27df26308726


    Headers

    Imports

    Sections