General

  • Target

    48cdf55a7c1b1e09ced11305d26f249c7cb4b9ccda3b47952100498811d1d0e0

  • Size

    72KB

  • MD5

    2fa833a2378a9606f694e860616bef9c

  • SHA1

    94601bc585e02bb3673e087aed7648a5b2ae5d82

  • SHA256

    48cdf55a7c1b1e09ced11305d26f249c7cb4b9ccda3b47952100498811d1d0e0

  • SHA512

    848fc4ac6cb986c662c8990e28b3929d34af23ceedd991767e2a11771be0a8514c9c9765c6e005dda696d7e80f20010a998a10178b6b22a801894d2235aa8d93

  • SSDEEP

    1536:InR5JN5XSHeYMEbZyacCjFfmapSoGepCm/Mb+KR0Nc8QsJq39:WR5L5XPY/bZSCjeIpCqe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.121.133:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48cdf55a7c1b1e09ced11305d26f249c7cb4b9ccda3b47952100498811d1d0e0
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections