General

  • Target

    83b1bc22867568240fee839b894cabe89b77b99dd6895b5910217285a051e0ac

  • Size

    1.2MB

  • MD5

    b20c32dc04b1aa5509511e1923aa9329

  • SHA1

    d183b67664eb7bb871be739d323c2794a4619645

  • SHA256

    83b1bc22867568240fee839b894cabe89b77b99dd6895b5910217285a051e0ac

  • SHA512

    89c3dd92bcff693bc4ec255160b7eccae53ffc5bbdd233a76e9b14b2fa8ec51f65c97d0e069406825a64edbb8a1f6a7740040f96f8f5154ca4521590151205d6

  • SSDEEP

    24576:l0zNUFole0vjq3qcQlyZLmBreczDVmSBy15LbCbLO3h34cup/d5aGwLZJTqNh+Wy:FLbaYgMO8m

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.175.131:2333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 83b1bc22867568240fee839b894cabe89b77b99dd6895b5910217285a051e0ac
    .exe windows:6 windows x64 arch:x64

    c2dee9c6693ce5e6daf95aa1fb6c7f5b


    Headers

    Imports

    Sections