General

  • Target

    1e7f07add8d8b88c7bd11c2062abcc8b

  • Size

    72KB

  • MD5

    1e7f07add8d8b88c7bd11c2062abcc8b

  • SHA1

    2bb2c2c22528aa06fc99a61c1aa6e2127cee2a17

  • SHA256

    02a1e64bb542b41d850067653efbf58fbf1f8a3ff128474bee3ec108f0bc7997

  • SHA512

    dceb8f2b28cea670db0f6aca4be8a317098a442c9c0125b9c68193ccb3aefb9a6e103239f0002a45d19acd17807bf75040b5d16c22f3402509fb1f981cc64ec3

  • SSDEEP

    1536:I8/0LytG4SPHNBxOzwcnwpGD9pOMN+eTlNc8Qsfq39:d/0TPEzw3Ge+lNc8QsQ9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.106:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e7f07add8d8b88c7bd11c2062abcc8b
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections