General

  • Target

    13e93b5225d0de573dff0638167308c9327ce3f47e6fb5f90946c6d19ae169e7

  • Size

    5.6MB

  • MD5

    9a93ae0844844caee427eaec548cd976

  • SHA1

    4e6a2a1f321254fde018fdf68cdd24be82a0959d

  • SHA256

    13e93b5225d0de573dff0638167308c9327ce3f47e6fb5f90946c6d19ae169e7

  • SHA512

    1a411310ff4b4a7cc71acf7acf6ff10e12f4adccc21275329ef9e94befa21b72e00b4cf038badda157d322412390879460174d956b117a9a58ef62e568f21747

  • SSDEEP

    49152:7rQq5sYa1QGN4rGyAnEMuMZRkQEmlnkVkE1j2ypQM5uCcGFQO8OsP/d7PlwDMuv3:yVh5nrNExb1ZXsBum7vyisEn0ghR

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13e93b5225d0de573dff0638167308c9327ce3f47e6fb5f90946c6d19ae169e7
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections