General

  • Target

    testapp.exe

  • Size

    72KB

  • MD5

    48c9b1b801dfc4b4361b00c43ea50789

  • SHA1

    a3cdb00faae8649ccf903afcfadf1ef79a678073

  • SHA256

    0bb1a3c1c5429c3632051838d85dfdb653e27ac0ca9adb044cfb6af9257b6970

  • SHA512

    29509c2216e0ca307357a2c211148338eca2db147428bdd5119357b58ae6bba45ea75b7b78a97b6bd6db527af411c12550b54ba3415168f625439b36b0c75764

  • SSDEEP

    1536:IlEvPh9REMHxfVKbEEoSmB+PhYGD+v9Mb+KR0Nc8QsJq39:kEb2MRfVKdojhC+Ve0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.39:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testapp.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections