General

  • Target

    ca5ab6b14600882ed27cf8d01132f7c0598464fa64c8f69e97e458266a7dff10

  • Size

    9KB

  • MD5

    ecf4540e07aaef19ec1834a0e86f0a52

  • SHA1

    e66b42c7af9560c3a1dfe138d13420a9479c8086

  • SHA256

    ca5ab6b14600882ed27cf8d01132f7c0598464fa64c8f69e97e458266a7dff10

  • SHA512

    a3dc86f6bfb09945fd1388c1f465744649ce914a308b2f30b968e48286dee6eddf8a776aa468b3c20e47522ea7ea923ad549fd725c589b0fc2c56cff0293db45

  • SSDEEP

    48:q0kV3zU9G4aNVh7XphlhEF57/nc+uu6JLPbOE:vDIKkO6JL

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

169.254.0.1:65535

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca5ab6b14600882ed27cf8d01132f7c0598464fa64c8f69e97e458266a7dff10
    .dll windows:6 windows x86 arch:x86

    57d6e7112c8e716cfe2eb0ff9f36763c


    Headers

    Imports

    Sections