General

  • Target

    6f0ccb88112c82e09d410991e53950ab

  • Size

    72KB

  • MD5

    6f0ccb88112c82e09d410991e53950ab

  • SHA1

    97614028f6dbdbf7b31d7cca2fe8e2f9b6de4b72

  • SHA256

    b2035edbd09394839fbc568ca5daf7171f6615565d8798fb517265ba73e17a25

  • SHA512

    62972886cfde60f9231bac08ff9f76fd76bfeae12d829456d01a5efca9b31767b502b42d8de6c7e81a620129ca9091beb039d0c39d64ab5b80eb0596aac5adda

  • SSDEEP

    1536:IM3mUbbNerFWK295Q+1gNNudJsBVMb+KR0Nc8QsJq39:R3jterS5LePSgVe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.105:4455

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f0ccb88112c82e09d410991e53950ab
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections