General

  • Target

    shell.exe

  • Size

    72KB

  • MD5

    d550461c3f2c884293c87f4013f30cd9

  • SHA1

    bc20e4f445477ba3b9a376eb395e0f06648c7bbe

  • SHA256

    6dc2fc7c93019c82e2b13232fcbee52477ce451c8399304edfa6a0ba351fc95c

  • SHA512

    8d1186e4d73d34e8558916682786d86324a318174f66d4088e09b99094c438a56b11d206be864c269254464180760b849a679765609219076509cf579540056e

  • SSDEEP

    1536:Iogf50c+Uy+kZ9bCe7HAMGye+8ddhMb+KR0Nc8QsJq39:iic+Z+kZNCerHi1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

108.174.195.133:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections