General

  • Target

    riya.exe

  • Size

    72KB

  • MD5

    f7c67477d0ebf5c5271cdc45b35546db

  • SHA1

    2f3d36abd3e642d422cb4b03648645cca0cf806a

  • SHA256

    30c242700415f48feb0dd8d94d9bbe7ebf145167960cdd0769613469825605c9

  • SHA512

    3ae1f7086e6a3d7fb6882746e374d5f49b259f460c5182892ff160a3789059738a59d05273aabc6880f384bdc589fe174124ea94708bfc3b4980ec0dbfb7bbbf

  • SSDEEP

    1536:INCpBI0AkSNrO7zyEUK7bK4KCgHMb+KR0Nc8QsJq39:kWAHNrgzblKHHe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

13.53.177.142:4545

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • riya.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections