General

  • Target

    3a3d2602a41755278d49ffc35cb170f15fc846a8d2fa9210f625e8fa579e76b4

  • Size

    72KB

  • MD5

    c5d98f37ca731609b1965fce824e1a6a

  • SHA1

    0e3ab5878499c458afe10697bf5c8eee07ba5891

  • SHA256

    3a3d2602a41755278d49ffc35cb170f15fc846a8d2fa9210f625e8fa579e76b4

  • SHA512

    f5bc1d0f076f8ecd04af55b910e75186fe0f787c91cdbb98d3311967aa7e34cee763fe6ec8bcbbc10742a56e67bd2f63af2165d1d82c62688818d27ada7cb45c

  • SSDEEP

    1536:IFthMwELD1KBjEdydqEjc+DqDbv1avyB2sqMb+KR0Nc8QsJq39:6t2wW1ijEdyEb+DsbN0mnqe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.113:4545

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a3d2602a41755278d49ffc35cb170f15fc846a8d2fa9210f625e8fa579e76b4
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections