General

  • Target

    90e77fa814d9a420112c8d99b7838470N.exe

  • Size

    72KB

  • MD5

    90e77fa814d9a420112c8d99b7838470

  • SHA1

    71713a18db875acdbd1136b54dbb85a947f32886

  • SHA256

    658aeae697034ac666d84546f79064a3519a314c34c88e5e4777be1957d13888

  • SHA512

    c325559c48ad1d4967567c078aef5f2ffe700cc7f4ff6c63ae86c437a4481c098fd1ce766f76a21ba31f63822544961462ac7fa88dadc4ae7308b5c4d6f50ed2

  • SSDEEP

    1536:IKAimqOiAAr9AWZoMWLDpaTdCzG6AUzMb+KR0Nc8QsJq39:RA3HFAr9D4ZapGG6AUze0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.138.45.170:19361

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 90e77fa814d9a420112c8d99b7838470N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections