General

  • Target

    258f0036061a9731caa635d83928c721

  • Size

    72KB

  • MD5

    258f0036061a9731caa635d83928c721

  • SHA1

    2c2107b6bd60533ebcc4d409513d54b43305d370

  • SHA256

    0bc29a0979b90f12e488c78a373e8eadd51d30ea85a3954925a3f6aa09a04851

  • SHA512

    2bd11d3be02b135f0a1f0e54d8006e9604c6d368b3792580f44e5f452bf7a54a9cc23669bf58a1ed7c2ea0d55807f99b232f472c42c83b25a2d31d6f19cf051b

  • SSDEEP

    1536:IPqBU0cU76Xd8QGZh6ob3I1mwhQUQjyouvMb+KR0Nc8QsJq39:00cUWXdiW2GpQUzFve0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.140.164.85:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 258f0036061a9731caa635d83928c721
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections