General

  • Target

    b11c777d414132a3465b94ce2d71ae1ac4880fb9332fe40d306a197d72cb61f1

  • Size

    72KB

  • MD5

    a2ad51ddc54ae9a5eea7b1f1ff223508

  • SHA1

    76996d34a37cc8ae9f71ac59cb6b83ccf9cf9644

  • SHA256

    b11c777d414132a3465b94ce2d71ae1ac4880fb9332fe40d306a197d72cb61f1

  • SHA512

    e1ef3887a4ebac26f1012ac706bda464122e2e659e1c58dca701ec6cee29e3bf3d27ff43969601497f9cc81e168540b2dcd66cddbb92e6427af04343a60c6b52

  • SSDEEP

    1536:IQhU9au6yN8nDeQNizI4cyy+5Uk90BqtLA8xK64xzMb+KR0Nc8QsJq39:HU9H8aQNizI4tiGLzKRze0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

80.195.5.133:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b11c777d414132a3465b94ce2d71ae1ac4880fb9332fe40d306a197d72cb61f1
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections