General

  • Target

    4ae6cc5f9145fbffcb62882b84bc5190N.exe

  • Size

    72KB

  • MD5

    4ae6cc5f9145fbffcb62882b84bc5190

  • SHA1

    de70797fe590807ab6de9c280d4780a30b94881f

  • SHA256

    ff060e36338284ccbbbf4677b32df495917437a669d3fe6790d470013984c806

  • SHA512

    9f9aa175a04da42812b47726e17d16b8416bf4ba8eeec9e3a818c11f4aca2727c0b13dd2b4c8dc6e80f56f9ba153ce861d7f7e6a0ad6a71f83263bc693c0bc6c

  • SSDEEP

    1536:IPQpseGggfyvEZeyOLh6Pp7IMb+KR0Nc8QsJq39:mQ6ggfPSQ7Ie0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.79.161:6666

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ae6cc5f9145fbffcb62882b84bc5190N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections