General

  • Target

    e23d6a92aadb10d50def1cb619e907394272d516ee74540499d02763baa20c9a

  • Size

    8.4MB

  • MD5

    5d01d28bc80965b2cdafe1559ad72256

  • SHA1

    39886dc15a622367fa06de7c552a393273d0db98

  • SHA256

    e23d6a92aadb10d50def1cb619e907394272d516ee74540499d02763baa20c9a

  • SHA512

    946fd6128ec6661dd721f78529ae11bef08a0c20295d68aef79a8cb5cc694dca872951393f8f945343fd394228eee4b8ab07502bc30d3da11b1f4345ffdbd886

  • SSDEEP

    98304:D0hcTbnm3TPYyOWrB85WvgtgMsbqMf4QNxrwWsIoaE/y6x6:D0cbm3cyaWBiqO6

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

112.74.89.58:45761

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e23d6a92aadb10d50def1cb619e907394272d516ee74540499d02763baa20c9a
    .exe windows:6 windows x64 arch:x64

    65892a964106b5e0c6c363fdf21975eb


    Headers

    Imports

    Sections