General

  • Target

    8702242036ed5bf74ebf0fcaaf5e6622c8673a80b6ce99bb54c17f219c583a3b.exe

  • Size

    72KB

  • MD5

    bcfb615b50a923db6d8de9538414d784

  • SHA1

    e55bf128371e8958fb17111f3c3e680338734612

  • SHA256

    8702242036ed5bf74ebf0fcaaf5e6622c8673a80b6ce99bb54c17f219c583a3b

  • SHA512

    05b8f0418dc448915687b2e7dd26afe8f28c22490209636ca7ee7f53d2d3e38466d87c17c8bd3f5ccb93025bb7d462040c8a5fd1519bec346da03b4235837c4d

  • SSDEEP

    1536:InCrXAXugQW+qmB6M7Iii2J2YiBcAMb+KR0Nc8QsJq39:aCrXAXugQXnL7diGAe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

198.211.108.152:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8702242036ed5bf74ebf0fcaaf5e6622c8673a80b6ce99bb54c17f219c583a3b.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections