General

  • Target

    5f6e8ca2260ff07f7cf471d5745d4704

  • Size

    234KB

  • MD5

    5f6e8ca2260ff07f7cf471d5745d4704

  • SHA1

    b3c05b6522e69105b80bf5e805a8548d7b79ba40

  • SHA256

    a3e1ffc785c4fea323bd3dcd224583c2e45211d856db2f0ef62c53f7335057f2

  • SHA512

    05024049689967a80ba9c6393a73ca53248b21b8d08ee08b248c3dcd8b47ac6ba5e26730dc990517ba461995ad3ce88d9e695f9d777c24a75031b26aabc1f9bd

  • SSDEEP

    3072:KM/k4DYzdELUW8M7aLT2Qn6AAN/UmCasnjZL:KM/Szd+UW773Qn1AN/YaMR

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.28:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f6e8ca2260ff07f7cf471d5745d4704
    .exe windows:4 windows x86 arch:x86

    d2c01bab74faf8a2aab28ae9a4e63c4f


    Headers

    Imports

    Sections