General

  • Target

    dc31abea5c990eefe7f35fa33dc99e04

  • Size

    72KB

  • MD5

    dc31abea5c990eefe7f35fa33dc99e04

  • SHA1

    f8da355fbf95fc03e2e5913466bc639209ec6845

  • SHA256

    5b4dca5ae7aeb581c7d10bbb3e4276234096223fcfe519590e425f4990eee3f6

  • SHA512

    f9c5f367d4d0d149cff6ba33c8003b1a9a482eac7d1fdb4efd3af91999b39c77037772742bf0c88bec35a0f129df4e009624fc77ffd5ffea847e2967f2b0c243

  • SSDEEP

    1536:IEccGYeyMgP3qmPf7M0pMb+KR0Nc8QsJq39:Zc0evgPamPf71pe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc31abea5c990eefe7f35fa33dc99e04
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections