General

  • Target

    0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc

  • Size

    72KB

  • MD5

    71c534ef58ee024432b8562064354a8d

  • SHA1

    cfc3d9b4c500ee11e914f503c664ca224a20ce7c

  • SHA256

    0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc

  • SHA512

    db184aaaf520de7485814a178bd490934bffe3e544cdedaecc48ae90968a4fd65b1d4ec56a5d137a478e4a0b191deb90d1042f03d4784b5e9a7e26c5bbc662e0

  • SSDEEP

    1536:IHGCESCQlJu6inkWJYHCn5fXgYLzMb+KR0Nc8QsJq39:0hCQzuZYHa7e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.172:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0737e97852c494a17f7ed1ffa0f4ffc40da2e74094ff68bfa959d1f0d070f3cc
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections