Overview

overview

10

Static

static

10

tcp.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tcp.exe

  • Size

    72KB

  • MD5

    42e72e56aaf02a6b80948dd4492df5b4

  • SHA1

    c09bb4262a2d0609ca3998782f73fe8c5990f15a

  • SHA256

    c2b27a51b531606d6b5be39c5a6cee16f1d16fe60288eb2f578a72e5789aa456

  • SHA512

    aabac17a6e6c0635983ad87f5f708444d954620ffb06bf902b0e903e6e4a3e18677547ce472b3f400ea3d7e5e837f372ae270eab811336b1c710b17471685caa

  • SSDEEP

    1536:IjoNVb4rgMeqzgvvDtT1LnjXk942YIyMb+KR0Nc8QsJq39:ooNF4rveqz4x5LjUfYVe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.125.223.134:19368

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tcp.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections