General

  • Target

    18a7eab48e4fe9a0a29fedd96cc71034

  • Size

    72KB

  • MD5

    18a7eab48e4fe9a0a29fedd96cc71034

  • SHA1

    51aed880247d85057a9a3e2bd8c33fcf35fe54f4

  • SHA256

    b67e18e5ee22951fc60ff6970166ca8b8171b8ad72f244ba7a56202b3dc58408

  • SHA512

    55a94624a41112319ceb05b0f80de51fbd843015a9aff5f575772dafb95a0e5f51b77f41752de6ff8f5fe0d1aa3337b4988f956e9bf523de6bf8416de7334325

  • SSDEEP

    1536:IImP+WbEgvmIW0Zst7S6B2gdB7tbCe92OHS8PRcokMb+KR0Nc8QsJq39:LgM0Zq7zB9dBtbO6S0aDe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.215:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18a7eab48e4fe9a0a29fedd96cc71034
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections