General

  • Target

    8dbe873a27e119ad50097356217bee38

  • Size

    72KB

  • MD5

    8dbe873a27e119ad50097356217bee38

  • SHA1

    3f09585adeb44adcdb9c1c90dd3de0ecf3f14348

  • SHA256

    dbc87329999662015e73976cd42d2f4e7b6e78ee3887fd8a2f3256e93f96bc90

  • SHA512

    a43dec4bc869e6f08ed1f605cb65360d72d7c857f2688d1b464e92c04f22b52ca1f3074dabcf20cfaaa45d9a7be01741cfebac228c3add4c1f1f7ef33678164d

  • SSDEEP

    1536:IxqROKfsGfcN85u9bBvK2Rp9jM3Mb+KR0Nc8QsJq39:AeZfcW5AbxCe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

41.105.2.6:4545

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8dbe873a27e119ad50097356217bee38
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections