General

  • Target

    2171875a25a45e8fdda84b7a1de5a112de60f081762daec9f0abd0a19416237f.exe

  • Size

    72KB

  • MD5

    38c1b89e7f4355761403ef98b65c3ea8

  • SHA1

    e2d7fff4d94935518078d82457ff8b730abb1a7e

  • SHA256

    2171875a25a45e8fdda84b7a1de5a112de60f081762daec9f0abd0a19416237f

  • SHA512

    37727f89b7e06c2169a3993626f455bff160106690a23d54b7c66bc186653bed875e39e412b812a06d790295e764d1329c8c989383469b5728ef1c08ecedfc6d

  • SSDEEP

    1536:IGZQxXbhOdBoaAirhu790nxrrMb+KR0Nc8QsJq3l:NsroB7Af7khe0Nc8QsCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.25.133:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2171875a25a45e8fdda84b7a1de5a112de60f081762daec9f0abd0a19416237f.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections