General

  • Target

    8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f

  • Size

    72KB

  • MD5

    65db5a5d8ca940f3fe9d80230bc58b23

  • SHA1

    694d104def6ee5f403c2c2e9f259c1a8613f0a3c

  • SHA256

    8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f

  • SHA512

    1818eab267a0153ff6fbdc161017660ec7c2175f89998c414ee0777125e537f69b8ceef49a0586aa02f8fa79c65a317a90161ccb0517050423b611c64aad9cca

  • SSDEEP

    1536:I4WNwd4qnHjUv3lznkw5DC6+SedMb+KR0Nc8QsJq39:Fv+qnHjChl+Sede0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

185.208.158.203:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ebd06f68166f3edbf00d2f39e5e29cc91e6bd973d64c9f1f9e5f2dc622a569f
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections