General

  • Target

    5fc5aafe8f66f8bdea79e47e44c9a3aa

  • Size

    72KB

  • MD5

    5fc5aafe8f66f8bdea79e47e44c9a3aa

  • SHA1

    3cc66fe412734631df732a76cd323e8ff23edd5d

  • SHA256

    e0b4ffc49a50af7428db412029aeb03f91d8b71d22133d0d6f60f0ca0b3a8821

  • SHA512

    935f7c12bc2cd7cbe4c8f4767a61ad8af5a6ba413eadb9fd4275510d3caa2431b4a6c71ba15ab5b789b077ac414cb5af9d19281c53b1879be30f80dfe35839ef

  • SSDEEP

    1536:IvPHVj0imkJjLVq+6f3kctMb+KR0Nc8QsJq39:gVRNLVq++0Ee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

172.16.10.106:4465

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fc5aafe8f66f8bdea79e47e44c9a3aa
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections