General

  • Target

    749c7eea83e09de0189d7d9164794a15c5bfa71294c018ee97010202541d65aa.exe

  • Size

    72KB

  • MD5

    356697b39d3721250aa3cc92bacc6120

  • SHA1

    d56b0e7c6eb816c6e7f5ad2023d00536ad0c3d57

  • SHA256

    749c7eea83e09de0189d7d9164794a15c5bfa71294c018ee97010202541d65aa

  • SHA512

    e2411766cc9de689ece6678dc5b417b2de392b66393ca31a7f24c00a077a6ed73cf3ce8f174794bf414f64131329f68b95ea43cd594c5c05caae837d03627a28

  • SSDEEP

    1536:IZE3FBTEuEdt5CDpaoY9lZ0uxXHInvCREq0WMb+KR0Nc8QsJq39:asFyuEdpquxYtOe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

129.159.151.146:3344

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 749c7eea83e09de0189d7d9164794a15c5bfa71294c018ee97010202541d65aa.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections