General

  • Target

    c090bf95d48bd8002b8f6e3894fbeae01f508d11400102c4ee85a4f071373f28

  • Size

    72KB

  • MD5

    8b9d360ac0a1b540518739f48be278de

  • SHA1

    3d4361967e82dc90ddda3037f1495640175162c3

  • SHA256

    c090bf95d48bd8002b8f6e3894fbeae01f508d11400102c4ee85a4f071373f28

  • SHA512

    3fded86fe820f8bb7b83beb791e5c7181ebbe935008074ce7860f88bd814684f5cc291f74a8e9272d5c337217731c654edd50e3b501481b728a2236ff0c49d3c

  • SSDEEP

    1536:Ia5Ftgz2CC5WjGgYyZCx1AbcflBbEFaeMb+KR0Nc8QsJq39:r5FHCB6gYy81scfCaee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.64.130:12345

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c090bf95d48bd8002b8f6e3894fbeae01f508d11400102c4ee85a4f071373f28
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections