General

  • Target

    e2d7b22c3714d33bf8ccbd4eaf0ee4c62e57b63408e19f2d2811f94e55b70dab

  • Size

    271KB

  • MD5

    1cd13941a7db7c1e043ff8fb57bb95f2

  • SHA1

    1fe0e8df0efe395aefe5c73a641d382ac38a2cec

  • SHA256

    e2d7b22c3714d33bf8ccbd4eaf0ee4c62e57b63408e19f2d2811f94e55b70dab

  • SHA512

    a1ce6f93c99816de2c41ce0835e531990e8596ce50c7ef9c3ab7a5f0c531fe8531d74c2f259b355eae1db2aa64194317ce327f5f3eaeebcacf76dd0c693b108b

  • SSDEEP

    3072:fCorBcf1IagyQi9LqgWnjBPrH3T9XdCGUhJ2V8yIsKx3gEAlsz5+rVRTb:qotcf17gyQ6LqjlXvCdhMMElA+VRn

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.135:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e2d7b22c3714d33bf8ccbd4eaf0ee4c62e57b63408e19f2d2811f94e55b70dab
    .exe windows:5 windows x86 arch:x86

    e60d6136789d1031cc3df6834c2f3b85


    Headers

    Imports

    Sections