General

  • Target

    5efab529c30f2571bbb2c3d093898cdf296878dd330afc7dfd68bf86c53b7dae.dll

  • Size

    8KB

  • MD5

    43296c4ac197f6feae234bb99e90ad57

  • SHA1

    6fe1b66534e85db1e8825b6b7cb9ee9fb621cfbd

  • SHA256

    5efab529c30f2571bbb2c3d093898cdf296878dd330afc7dfd68bf86c53b7dae

  • SHA512

    944bdf639a907689804557d50f3d3d7f69edc02f4a08cbc952397753527cfd716613286af763cfe5834faaddce14812daeb7ed3ae5a63feaee4ed7627cedb701

  • SSDEEP

    48:qUr3zU9G4aNVhnX5hthMt6dO54WTJ7d5b:+DIi59J7

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.105.66.118:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5efab529c30f2571bbb2c3d093898cdf296878dd330afc7dfd68bf86c53b7dae.dll
    .dll windows:6 windows x86 arch:x86

    57d6e7112c8e716cfe2eb0ff9f36763c


    Headers

    Imports

    Sections