General

  • Target

    test.exe

  • Size

    72KB

  • MD5

    93202c1a1766ca16ad5d02922075c4be

  • SHA1

    cfa4d5e8f66face09866f80b992cb8abe6801634

  • SHA256

    a15c62a5205ee7c3e0cf07ed38a8096434c2fc3a39d18b15e71c82ed3600694e

  • SHA512

    7f692e3e7aa7c0f7898c376ac9bbb42305bdaab9df6ac8e56ae7f4405cc67fc1bc38b833fb5b0d3b8b4b6b2a84e30ff3451f25e2b735f5fcbd09d6513b048a03

  • SSDEEP

    1536:IWvtrdZDuWKEeSHVzsXXoqNsPKfChPC9TMb+KR0Nc8QsJq39:HrdZDwE7sXotPKqh0e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

0.0.17.92:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections