General

  • Target

    6bca0555dd2acf29a8f59adb80fd98e8538c21ebff0c8da806e89e5de50c17f6.exe

  • Size

    72KB

  • MD5

    3927e886f280b29866dce82e7cd2262a

  • SHA1

    890c20696019077094dc50b7381dcf1c9fc84462

  • SHA256

    6bca0555dd2acf29a8f59adb80fd98e8538c21ebff0c8da806e89e5de50c17f6

  • SHA512

    386276124d84f8fc7fc3703b7d99b5b9eeb86a67c4dce1e3dfec13365d8ffff7d8f464b4a34efd86b859c2fb8dd29460470edf5d957b5012f472b339c78d587f

  • SSDEEP

    768:IAxKu31TNCSVUNF3ge1JCTV7gSwDuQBF55x6TXDbQQDGPCHSckzCScx4qXfb+KR9:IMmR3Wfw5/VoDncMb+KR0Nc8QsJq39

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.34.56.44:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bca0555dd2acf29a8f59adb80fd98e8538c21ebff0c8da806e89e5de50c17f6.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections