General

  • Target

    592c739314cb35849a51cd074449b8c4

  • Size

    72KB

  • MD5

    592c739314cb35849a51cd074449b8c4

  • SHA1

    943197510acc99e6d4c4de8e35cdf79ac9258ea9

  • SHA256

    dc1c11451d5f2f004e498f315b003648cf0e79448a6f04b2f6e1f685f61eed4e

  • SHA512

    3cf8cc67e03d907b474998746061bffbdf24bb17a645294a0e899b2fa5c118c2a20cc09a5c9fb3c35d1beaf13e931c4667df9c40b09acd5febfa9cb4da6749f1

  • SSDEEP

    1536:IRC1TS4zI9C/S7FNrRpKkkaRMb+KR0Nc8QsJq39:EiOm6rrVe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

188.24.184.168:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 592c739314cb35849a51cd074449b8c4
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections