General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    92cdc08dc3a180df9f1795418bf0e1d5

  • SHA1

    feadece8a4573f20bcebb54634e831375f06b620

  • SHA256

    f3c25824a330e0ae8a0a7e3969741bb0c55757e5e0549930624d84516d89e2e8

  • SHA512

    3828bab45142bd243502d453b333fb51eb94c6592f41ef97f928e36d71d9efbb540668c317ec13f1b5775a8724ba5096d6b5f03b2014bcd13f13509f19044965

  • SSDEEP

    1536:I6/8YNNkqeUfMQYy0mDQovMb+KR0Nc8QsJq39:R8YNNkpUf9Ypfove0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

103.220.219.38:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections