General

  • Target

    shell.exe

  • Size

    72KB

  • MD5

    45179843189cd426c02f3331bf03d22b

  • SHA1

    5d59d8f4b40db1a2f0b33f1131edef352f363256

  • SHA256

    e97e57debfde99b5187a08b939bd3d2d4f571a2fc8d74a9784a0943493a331cb

  • SHA512

    88104cb5e74ba30995331ae2eea0960f3413675494e0f65964e73279c16ceb3ba872e8696fd4eb06b2485126472b3f8ed1eea7dbe9d34422a9eda93459b7ab07

  • SSDEEP

    1536:IHz5n8Z8Vr46xrtf6DrYCSQmVEnvMb+KR0Nc8QsJq39:Kz5nRV9P64CXIIe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

107.175.76.130:2222

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections