General

  • Target

    bbd7f6ad3b22b414dbe9cd7f77176ac2554de9d7c0cde623d3978816c3f89d19

  • Size

    54KB

  • MD5

    b69dd225661d468a8853043674113062

  • SHA1

    81f5da18ff8c95773da55994a0a01d9566715c42

  • SHA256

    bbd7f6ad3b22b414dbe9cd7f77176ac2554de9d7c0cde623d3978816c3f89d19

  • SHA512

    9ffd6e0c8afe92a764b79b5bdf86d48e957104475fe5a14d2af77b6e7aea0f6326c7dd8ced49ccae6337668d5e0b43325a634e2028844b7bcd21566fa26dbf58

  • SSDEEP

    768:aNSNGJHZI6+kg0s+1BNc/wTF8wDiDwVfgd3NEp3Wc+W:ahY660s+1Lc/wh8wDiDKA3RA

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.187.128:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbd7f6ad3b22b414dbe9cd7f77176ac2554de9d7c0cde623d3978816c3f89d19
    .exe windows:4 windows x64 arch:x64

    326ad615e22084c66d91e83bf7ae8748


    Headers

    Imports

    Sections