General

  • Target

    716b4d7658a710e3eaa7ea133332bbe4

  • Size

    72KB

  • MD5

    716b4d7658a710e3eaa7ea133332bbe4

  • SHA1

    4584d60188a607fe983274b926f6caa4535f077a

  • SHA256

    593a4d2c6f191bca79667d61e260ba1781171942a6177a705d673f8ba5781e15

  • SHA512

    b45516aa55495f0bca40a664f423cdeda145a5fec50d5d26173f1bc6b59475dfe8d51e0eff5ff1eed003ce2392acf835780c284534d89440678181426eb9232f

  • SSDEEP

    1536:I3INXsH9KCIGiJ2YPGLAI8zCDqcKy0vMb+KR0Nc8QsJq39:G68dKvLoYPGo9cJ0e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.1.1.2:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 716b4d7658a710e3eaa7ea133332bbe4
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections