General

  • Target

    43971646ecdc68004bc42f0d35788cabd24887d9ec8bab29a4af5e5a91b7862b

  • Size

    72KB

  • MD5

    01a2296cfa643ed92a1b43eaccc40684

  • SHA1

    089fec94a210bc10fed2f585651319785be85346

  • SHA256

    43971646ecdc68004bc42f0d35788cabd24887d9ec8bab29a4af5e5a91b7862b

  • SHA512

    7a6875edf954c6c8e1d01ce43d206890babdf98261905ba044c7e210056914ac1cd9fa0c546fc3600b7ea7c4f859541c719cbc733d4e212612cf72745e70ca33

  • SSDEEP

    1536:IZwu2YIDMEuJScbe6YVbnf+lXABMb+KR0Nc8QsJq39:Du1IDIbe6YV6lXABe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

144.22.38.242:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43971646ecdc68004bc42f0d35788cabd24887d9ec8bab29a4af5e5a91b7862b
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections