General

  • Target

    bbcd8a9b1970635e14634b21b86b36be

  • Size

    72KB

  • MD5

    bbcd8a9b1970635e14634b21b86b36be

  • SHA1

    d2488129e8460a3a266030ab493ac633924d9a35

  • SHA256

    03dc8750a597561fd31d8b4aac6a20a20b5154bb20d6f97694f4f28d0a8fbb03

  • SHA512

    9bf87c2e0b1660ab644a4a2d3d6cdbbae0d8053f7cf600962255860614ba9f75afe4bbacc7436f2735cfc1316d1262c2503294f8a3bd2e36cc0fdeb60420c178

  • SSDEEP

    1536:IQ8e2kKn7q1pdkqNn1FEoApIQOMb+KR0Nc8Qs:h8esW1pdPN1Hnxe0Nc8Qs

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.10:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbcd8a9b1970635e14634b21b86b36be
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections