General

  • Target

    ec427fa768d640d6b2fab8ce8a603a22.exe

  • Size

    72KB

  • MD5

    ec427fa768d640d6b2fab8ce8a603a22

  • SHA1

    086b91bb440932f4e48d41098ffc6c17ae2ffb8e

  • SHA256

    3bf07ed96fb836d2fec72ea7a1bbcc4a9d6d2e7aa99f5b10600015505ea2e8f5

  • SHA512

    a870f43c5ec8384efabb36b33a4d3d3b609447ecb26541d579b996f5642465f1da2d11332847317c280edfb2b0c3f50a9837a360cdca3705ec6c3b62eb518284

  • SSDEEP

    1536:I+cI6yVLJtETzjyYOXUSG3c2tZFQMtMb+KR0Nc8QsJq39:HcI6yVLJt6jDd33ZFQGe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

46.176.244.119:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec427fa768d640d6b2fab8ce8a603a22.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections