General

  • Target

    1b0f372613ffc94e8dbf0d4059784ffc

  • Size

    72KB

  • MD5

    1b0f372613ffc94e8dbf0d4059784ffc

  • SHA1

    4340c2d1ed36766eb4857c71362c74d6439fa09f

  • SHA256

    e0269320d29441e87f1e44f581007e61330d70fc37c94e08ab3f0612e948e988

  • SHA512

    71792f388fc479c722981af8813123df46168fa078eb59a3ead55f5cd522e71f727d46342f6dc3eb80a1840fd82c9ba3bee8aa8855902b6690fcbb94e96ec4ce

  • SSDEEP

    1536:Icl4ipPBBE4Ja1vTlU9ZZMb+KR0Nc8QsJq39:ZNRP56Raje0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

186.4.143.30:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b0f372613ffc94e8dbf0d4059784ffc
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections