General

  • Target

    5c9a2d7f518af3b6c8f7693fe5beed20N.exe

  • Size

    72KB

  • MD5

    5c9a2d7f518af3b6c8f7693fe5beed20

  • SHA1

    f5a5d40e5ed1d7845e8ed4990c504c8e779eee0b

  • SHA256

    8a41a3fd6e9f2271437252b48fb2d91914c4d8377111e139e7c126d670b781fb

  • SHA512

    2223faaabe083e89cace986c634234d551a8db8e9cc676a4b4c9b3e132975122cbb34dda40ffeda69c4692e6dfeca7c5d1c1abe498a1452faa88a957488c85a0

  • SSDEEP

    1536:Iww1F2JKXJf5SDOUdmum2/RRuMb+KR0Nc8QsJq39:Rw1FzXxUdmVwme0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.35.141:8880

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c9a2d7f518af3b6c8f7693fe5beed20N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections