General

  • Target

    a2681bb876583286309417fe086beccb

  • Size

    72KB

  • MD5

    a2681bb876583286309417fe086beccb

  • SHA1

    60e865f654bfa53368c88d015c701a7b59ca4159

  • SHA256

    2b9b49e2263334d7cbfb5fd0aeb26b9aa94e93541b3a68845fb4d0cf2927897d

  • SHA512

    62ac047153f3352156a27aec38270eb2f38a30207adc7a7c5013eaf8b41260e4b16f0c0174fd2dab2535e6beed83abe814ad7c718bc29bdd53508f31985388d8

  • SSDEEP

    1536:IZNqy/ISDUJmXwsenSl5zNpxfrS4oRsJ8YQsMb+KR0Nc8QsJq39:Cgy/zbwYl5bxfm4oeqYQse0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.47:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2681bb876583286309417fe086beccb
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections