General

  • Target

    e50914ae0bf75b279caaf65ac3a9d222.bin

  • Size

    72KB

  • MD5

    e50914ae0bf75b279caaf65ac3a9d222

  • SHA1

    be8a331627816bc0da922c7f506dab4530d0e962

  • SHA256

    3debd2ceefd8c64031ca66c3bc7165bfde2eee638c67a307642d7c6b8d9ce8ba

  • SHA512

    3cfab0ea9f61f797ed84432938e9d9d89031c45a085631532432aa358c1783a3faf14bbe002e227a8f86ad75f6a012746140681e33073be50956be4953d2a81a

  • SSDEEP

    1536:IDKtviSbF+ruQk20+JTF8F3hvBF/JMb+KR0Nc8QsJq39:V1bcuQk20/LBJe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

146.190.120.217:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e50914ae0bf75b279caaf65ac3a9d222.bin
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections