General

  • Target

    0490e1f0f51082be2f5ab80393fb94dd96ed46552866b7450eaf366f8a098bc2

  • Size

    84KB

  • MD5

    b4d8f8116a506f70859e5bb111d1e605

  • SHA1

    4776218ed16fcc404d38d992ef60cf97f9c091c0

  • SHA256

    0490e1f0f51082be2f5ab80393fb94dd96ed46552866b7450eaf366f8a098bc2

  • SHA512

    217300ca408037888c0cbde21f4e7213a0aa3e2b1581c3f7516680ed1d52e6904733a153a0f15f8201b40998a5fb72e5c24ea62377a706c6bc9987d3a7e10823

  • SSDEEP

    1536:foYDbhDjoef5RsAzGht1Mapepa4YITxKXt6/URBSdoBDax1DnjUsWWVxcdl3aKbl:hdQeRZKt1MkITxKXU/0Bsx1npSl3aKbZ

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.92.128:44444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0490e1f0f51082be2f5ab80393fb94dd96ed46552866b7450eaf366f8a098bc2
    .exe windows:6 windows x86 arch:x86

    374b107664a89406bfe6e68e191b85c1


    Headers

    Imports

    Sections