General

  • Target

    2.exe

  • Size

    72KB

  • MD5

    b07331de213d21b40a7d1a69a2650f64

  • SHA1

    6c58bbc34d5d758b47bae9593294a84572ee189d

  • SHA256

    f447aa72795e0689cf4f5b3e35a1caf79aba0b1b479a4f4e081e9ac2d25f0ff1

  • SHA512

    9ed030e025993ac6e6a6468c04c8962eefeddf45738617e52ef9712e70125130f51431ef35a93b60060d7009439efe0bdefefcba25cd23a5c100ca56113cf12a

  • SSDEEP

    1536:I8Xqz/gW50wm3ohZiQU5Mb+KR0Nc8QsJq39:RXqjgW50r4hZbU5e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

47.97.64.110:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections