General

  • Target

    download-reality.zip

  • Size

    42KB

  • MD5

    042dc91a562dc388ab25be9a31cb5bf4

  • SHA1

    1d138c396c59dfcda42c5b61ede7499a11b3c444

  • SHA256

    3459dba471a7ceb822507d17065fa9b0e0feef5b20a3e3d2d9b80ea216d64bd4

  • SHA512

    0b288d37a58b1ea1a8a2baa04825aa3aea1adbc22fdcb2d70fdc9fd925d66f64883c91fa8ccb14b55cfd000a8009483366c5b1819ab287739c767e0a8ad02cf4

  • SSDEEP

    768:qV9kBjFAPvGN9Dgjzc4noLeQ2h7KRQn59AqVgUmpN86WJRSCflzxKIUWwaYwV:uqBZweN9De5oqQ2cRM59r5qu6WJoaJIM

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

23.23.23.23:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • download-reality.zip
    .zip

    Password: infected

  • download.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections