General

  • Target

    pepe1.exe

  • Size

    72KB

  • MD5

    d12dd865550a65fbae8ad62d65f02ec2

  • SHA1

    9c04aa8419362b59f301bd7d88d9838c339a079d

  • SHA256

    8e7f0101aaf98b51126a04e9efe36fabee1b649c7549b986156aef47e3a8d634

  • SHA512

    4663225e6cca4adeeebe442e30d7bba3ab8eae3a2c7980d8eb43a96f2a53ab770b3769e673d4ff3392de5e3b0033db279303bb9e378131a3cb7399bb910f2bb1

  • SSDEEP

    1536:IRY5b7nkbjke+S8RstHu12AsMFBV6eKMb+KR0Nc8QsJq39:xkbge+S3O1lbFrZKe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

138.68.79.95:34492

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • pepe1.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections