General

  • Target

    Majd.exe

  • Size

    72KB

  • MD5

    aa26023a62b1ee319f572b7ab5f7fdea

  • SHA1

    3a33e780e8c22e8f36b9a7907fd9c1c1b26e849b

  • SHA256

    5684dbb9e6b5ecd2d207bf49f2a7df69c5f10568bedf6361ec3c9658c92cfe5e

  • SHA512

    b096a32d338282352afd56cfdf4726b2e972f18edaad97c2da5963672d20c0ba790729972b62cac764c29fd4b1c26e4da98fa60f3f01259ac5be518c3b60946e

  • SSDEEP

    1536:IIIMLNhskWEkAl1o/arS7ev3BPRzX6bGEJIlgOMb+KR0Nc8QsJq39:KMhCk7zEH2Bc61e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.105.0.147:9090

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Majd.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections