General

  • Target

    58f3f242b66b29c267f25051c2df2127

  • Size

    72KB

  • MD5

    58f3f242b66b29c267f25051c2df2127

  • SHA1

    75d73626d288e23913a73434132efe4d71dd9b09

  • SHA256

    e743f2795c9f03047a03f04a304f8343185d04e187ad4c35e2e267a4c65468e6

  • SHA512

    ff915d38478f74f749744c794ef6b891de19285c1ee7ca4c1213e6143a557b9e7b45b2a8dd11c8b07c165626d5506f7985c094e67c5a0052ba4cac5f61acc087

  • SSDEEP

    1536:Iha3QZFwUOQBZHs5qJHYGWUqkTSan2Mb+KR0Nc8QsJq39:MaOHZMi4TKSan2e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.102.120:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58f3f242b66b29c267f25051c2df2127
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections