General

  • Target

    d45468ad2256c04c0e14c8b1a8418630N.exe

  • Size

    72KB

  • MD5

    d45468ad2256c04c0e14c8b1a8418630

  • SHA1

    ac3658c85abd2edb5077a78a8b4df876e4fe880a

  • SHA256

    601baafaaa9a3206372c43920b35dab221ae35cb89cb61e0bf7c833b7100d350

  • SHA512

    c983669a1ab5700246565391b9d96c52aab5ec959ca363b89f6f199e55aca5d01b3d8fb9ebfdcb7ff8e99cd250a5d8826947b09bf311ec0df95b1e7107bce961

  • SSDEEP

    1536:IHsxKcIwrZ2ksvnI9f/d6Nrq1PiRc5D+8vEguiVMb+KR0Nc8QsJq39:SUKcIE4ZvI9f/xPuj8xuCe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:1001

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d45468ad2256c04c0e14c8b1a8418630N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections