General

  • Target

    114c1c8da28c4edbba44748d1a8c92e0c9f6c8c476b562e392c2faf77688819e.exe

  • Size

    72KB

  • MD5

    3229781147f8351f70dee0a38ff75071

  • SHA1

    1dad108af1cfd9ef8f4fd296be6df7e6c00293c8

  • SHA256

    114c1c8da28c4edbba44748d1a8c92e0c9f6c8c476b562e392c2faf77688819e

  • SHA512

    4701027243693dab9c74f5c66413a74e1d0d5e581b7d17672b236c65b2c48b456e00bc978ea91e36700ed38f5880e51708cf21aaf548104d85b14fadd3bf6240

  • SSDEEP

    1536:IW2oZGdUm7n8KztV+fIjV2r51CL9YMb+KR0Nc8QsJq39:L5yUan8cMgxK51CL9Ye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

82.9.14.4:4343

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 114c1c8da28c4edbba44748d1a8c92e0c9f6c8c476b562e392c2faf77688819e.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections