General

  • Target

    1.exe

  • Size

    72KB

  • MD5

    22daa57bdedf70736912f58aff9b070e

  • SHA1

    14b64ab6a6316b92d4fa563bd1a7719260aeca42

  • SHA256

    0eda3c8459159c099e2bee666500b92f9abd3ceadeab5f60a183684f3b89ef8f

  • SHA512

    f70a97ac86052d95fd1908de0b86fece028ab704a5c0bff73239486eafb2704fda893635f1a013afb05b3da225637711d2d054d10f32609f7270d7f70a19ff38

  • SSDEEP

    1536:I7jgU6NJEWX6qp1M1MuKmhP5T7nOAJcgHFsMb+KR0Nc8QsJq39:IEU6NJ7X6qjUMePFDOAJjFse0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.182.192.25:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections