General

  • Target

    4ac9e5343779c535dff4cfa64fda6585cd3d6fc84a07b45eaa399f345cc5de26.exe

  • Size

    72KB

  • MD5

    3ff0b0f98184e7e42f2858e18835482d

  • SHA1

    c5c6f42cc44919d4fc1cba0b6efd7db0b4979d74

  • SHA256

    4ac9e5343779c535dff4cfa64fda6585cd3d6fc84a07b45eaa399f345cc5de26

  • SHA512

    c32b21958b2f8aa1c0b29685a3b6aa4e56e7aa7fa1ac941cc17b6fde706a324beb193b2033f5f96932479ece03949aee09a89a12757ec77cb04ba950cab60990

  • SSDEEP

    1536:IKaY45zGDxzeNqlJrL4AeUVt7kSwMb+KR0Nc8QsJq39:jAzGDYNqfrmkt+e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

198.211.108.149:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ac9e5343779c535dff4cfa64fda6585cd3d6fc84a07b45eaa399f345cc5de26.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections