General

  • Target

    69cc52b1932c877b4ff5eb2f42d899b0N.exe

  • Size

    72KB

  • MD5

    69cc52b1932c877b4ff5eb2f42d899b0

  • SHA1

    1b3442e3eaa77d569f97f3a8fcbbd4b52ddada9d

  • SHA256

    0a5ea3a2fc416779e447ba68358767400e3a3fbe4204b2fb993a66bfc8b5d166

  • SHA512

    754bfb236761d14fdbf1c24c423a2a1f9ed3d58e0371ab14166c2fc6c0f0037fbc6e95698a5ee09c825cf15b52b6c40f0c928856b4fcb8118be2670ae2075f71

  • SSDEEP

    1536:IFOh+RM6Mi1QvwfecTmYI8x/tpfUoIyvE94Mb+KR0Nc8QsJq39:4OMRM6Mi1QvhcTPIclpMFUbe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69cc52b1932c877b4ff5eb2f42d899b0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections