General

  • Target

    3c6d8f910ff318b47b97ac91a604a4ab444f6d6db02b4f683fb1b1b7a0f384ed

  • Size

    72KB

  • MD5

    cecdf56179ae25f05551b80f914dd5bd

  • SHA1

    1fa2672d4b047f67e6b78f2cf114cf028138f8cd

  • SHA256

    3c6d8f910ff318b47b97ac91a604a4ab444f6d6db02b4f683fb1b1b7a0f384ed

  • SHA512

    c750612e2dded921589716f3323a558c7ab853741e3f86fca41012e1a8c5390e1c002da717196043e04ac55b06a79c92137b70f57f6a69c8fc3f0ca2a557520d

  • SSDEEP

    1536:I1mXbGs45DIfd7XQ0D7A7Eo6jIvvpJ8L7jMVMb+KR0Nc8QsJq39:AmBqEflLD4iIX8Lvoe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.55:4455

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c6d8f910ff318b47b97ac91a604a4ab444f6d6db02b4f683fb1b1b7a0f384ed
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections