General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    8700df3e9da741446d9e0eb6ab3fc3f6

  • SHA1

    fce0315d4992e25f830a49c35d111e19f3d476d6

  • SHA256

    3f241d5da4e4371cb48f1a585b2c68d6f901bc7a5264a12dfc1b6bbd6b84c0b6

  • SHA512

    006967a747a913ca2652af47902eac469e8648b5ec104deef0e4633d42d239b75bbd96a69fddf4d753e2bacf16faf987a1c652df4f9aee55917a8ffbcc55b991

  • SSDEEP

    1536:Ixp1CWxl7P/5tIJ9SLz2Aaqtk+derUGKMb+KR0Nc8QsJq39:LWLjIJ9Gdf9GKe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

123.249.91.163:7518

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections