General

  • Target

    d33d03c3eeda85469842dd8e19809007e54171f068137a17f425b43f2b94d407

  • Size

    426KB

  • MD5

    b462306119bd57b3d130f7cf9a5de14e

  • SHA1

    8e82c86b4c3b26cbfee6213c9b954aa2fd26f041

  • SHA256

    d33d03c3eeda85469842dd8e19809007e54171f068137a17f425b43f2b94d407

  • SHA512

    0baae580fee7aa81e8107ebbf6d3e5f293345ffa8d8290691e38d3b2a22d3934780407b5a37ad0d29f55f86e60b39932c033ace1e4709568e7507f695d507ac0

  • SSDEEP

    12288:mxLcvcdXtH3HdgtJZ7zwdBjufCEvfYiZuH6Pt:8NX13PBjufb

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.233.131:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d33d03c3eeda85469842dd8e19809007e54171f068137a17f425b43f2b94d407
    .exe windows:6 windows x86 arch:x86

    d1cf6535a5f77c04f0cb01c067e56fc0


    Headers

    Imports

    Sections