General

  • Target

    a65c9dd1d173f00867b18124f61839e63ca9b2c9ea189a3f2fde5d68490d58a9

  • Size

    72KB

  • MD5

    6596cac2546c00b1f33d9d9980166098

  • SHA1

    dacab8c232c248727504c88c8fbfc030fc6135a8

  • SHA256

    a65c9dd1d173f00867b18124f61839e63ca9b2c9ea189a3f2fde5d68490d58a9

  • SHA512

    c11388cae0a6f19410afdd09867d9e9adea6151ac32ab5449cb6bc4c027b267962cee01717c5f84b679d585efa65515949593e4c1896a7f67a25380f5c05cbd3

  • SSDEEP

    1536:I4DjPgGeuxln0wSPMvfs+syfWNGL51gbCQMb+KR0Nc8QsJq39:/HIUln0wK0U+oNGLLgde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.234.53:6666

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a65c9dd1d173f00867b18124f61839e63ca9b2c9ea189a3f2fde5d68490d58a9
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections