General

  • Target

    4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

  • Size

    5KB

  • MD5

    d8749aaa55fcb619256e735332f3e3f9

  • SHA1

    40b20f74004a682762001d7b32ea0b56969e4e11

  • SHA256

    4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49

  • SHA512

    4b472e26618e86c62e184b05fa7104e2fd705845ca1bf778c4d94f4047485393a7b4a08b88aa2a824caffc58913cdabd2f3faba6541618091b6042de83550c15

  • SSDEEP

    48:6PHH1U8lmvsgMuoRjSEnSv69TJdqg+OPuld0D5I:6qd8tdSyRJdYf0D

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.54:4313

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4da0971ca45122e726b9a6902525273e1f9ec1c86b84e00e6bddfcdec16b9d49
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections