General

  • Target

    a26f4d8b3d519f652fd5f73654c83706.exe

  • Size

    925KB

  • MD5

    a26f4d8b3d519f652fd5f73654c83706

  • SHA1

    60008f6e15f084eb7f292fc5e32c388e833db263

  • SHA256

    4f8555e7f9514f96bd720c761175f3f900bbf94df77b4392f2a298eeeb9448e9

  • SHA512

    6a7fb29428ed8136e0931761308a25986e75abc58005cb66f00c2e78056db882e6cbf167f927cb0be3c882d3c0d8971346753c298c1204bf30699bbc8a4bc6d6

  • SSDEEP

    12288:e3mL04DWfiiXuu+XEJuwOPitWjxbEXrb0zBua:dDWImusWjxbEXX0zoa

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.241.138:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a26f4d8b3d519f652fd5f73654c83706.exe
    .exe windows:6 windows x86 arch:x86

    448d05172e5c77f4d4a4e44616d941e8


    Headers

    Imports

    Sections