General

  • Target

    5555.exe

  • Size

    72KB

  • MD5

    99b1f5901c396f5d019f933eb80f6b09

  • SHA1

    a694ebdf0af3f24cff2066725cb8ad2f918ed9b5

  • SHA256

    19afe133f088e7f6a49a683f0f69970c9d662157e741c69b898574e972ae49c5

  • SHA512

    41bd207777546d3a6de208859b84c1a25fa17e9c85f94aaa506a0ba2ed68c19f08d9d47ba6003c13c1234b875d8984b38174d736958c1edcf263e0c61e6847f8

  • SSDEEP

    1536:Ia5f0kXFLG8f/JTO2mwtEw0pMb+KR0Nc8QsJq39:lMkfMwPge0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

144.22.38.242:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5555.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections