General

  • Target

    71fdc9021aca7c6a289ddcc26c24fcab60e95b2b2fb5062be99b2e9cd56b556b

  • Size

    1.8MB

  • MD5

    2e53a9953958a09efe11b0cf90eebab0

  • SHA1

    bc713ee8e0f7ac72bb878a7cd0b2d9d465f18026

  • SHA256

    71fdc9021aca7c6a289ddcc26c24fcab60e95b2b2fb5062be99b2e9cd56b556b

  • SHA512

    bb310445689fc0df409130e75b7d67c355e2ea50398026d2ca12bda76ace9668c951b3e70b7d6a1f60ed86cde3c1862cea7a26718028306c8981c89258b878d8

  • SSDEEP

    24576:F14iA3zopo5mvLsBTQVNaGVQ/ZUpPS2CJDWQeC6WgQhpt8NsIa73yVpZItiaOt+s:4EjEsOUwngQhpiQWFI2tg5FI2t

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.51.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 71fdc9021aca7c6a289ddcc26c24fcab60e95b2b2fb5062be99b2e9cd56b556b
    .exe windows:4 windows x86 arch:x86

    1bcee876dfae5e68c3451c29f9217c72


    Headers

    Imports

    Sections