General

  • Target

    2640e9ac8efa806d99f029c14f9eda664dc4a98213a4ae626ebfb8c68f05e24d

  • Size

    72KB

  • MD5

    fc5231a2be9a2dec58f6cd6a132d7233

  • SHA1

    abd9a461e4f9b4f3b54146e6ac3da58f7818bf76

  • SHA256

    2640e9ac8efa806d99f029c14f9eda664dc4a98213a4ae626ebfb8c68f05e24d

  • SHA512

    1c07b93cb2040a546f881dae04652b2663d039eec5afc2fc774985591321ec8b235d338072d5541962181c67042acf55ccffb4993154aa5cbb1f17f282dc987c

  • SSDEEP

    1536:Ie+ZzAInn2T7AiWHitORoDSc/5tMb+KR0Nc8QsJq39:vUASn2TvsR8Sc/be0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.5:3030

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2640e9ac8efa806d99f029c14f9eda664dc4a98213a4ae626ebfb8c68f05e24d
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections