General

  • Target

    Bginfo64.exe

  • Size

    72KB

  • MD5

    39516305088c8186d0f0af0862d65809

  • SHA1

    4609a32d42dba8923e30e0f2f13f78affb2a3534

  • SHA256

    8e6940672afe6dc087148eb2523c331b10b61f5b3dd15d6d11b07ad949c98d33

  • SHA512

    f7c981fe156b3210d1ab22d881a9f1b01f9c1a80d886ad927cd2c125c8556d0dc9fb93352b35a7bccd47a0da0bfbc3c1558a08adfd6a2625f34c52902be1f7f3

  • SSDEEP

    1536:IyfY+Fsw9ExQJ+Ix20vvQVKMb+KR0Nc8QsJq39:1fr2y+50HQEe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

103.103.44.45:8788

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bginfo64.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections