General

  • Target

    e3fd7f56965ff0d94148006dc9c0bd90N.exe

  • Size

    72KB

  • MD5

    e3fd7f56965ff0d94148006dc9c0bd90

  • SHA1

    46fd26a610d6b119d1f8eea411456e2e06498d06

  • SHA256

    5445c723f5cb1665c9475cd6db8a76dbc317fcfb98ec3b1b139e124db8daed39

  • SHA512

    93a5bdb6cd63d1c9adf12caf8bb98052e3e6c455e2a3409dc4430d7ea44a69c14aeaf3791777e3423402661a2707542164bc4cdaf261cc09d80a3464718b7de5

  • SSDEEP

    1536:IpY56mxMQYA+njrGZUz1Mb+KR0Nc8QsJq39:0Y8mxMQYAW7z1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.10:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e3fd7f56965ff0d94148006dc9c0bd90N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections