General

  • Target

    2dadb9296bd84024159fe9cb47d3431dbc4c567dbb489cc45bbdf70cd6f569f3

  • Size

    72KB

  • MD5

    4fad375e63ee24b9cd417eb4bcedf452

  • SHA1

    ee148600d158af182e3a50c85b8fc47ddf8397f3

  • SHA256

    2dadb9296bd84024159fe9cb47d3431dbc4c567dbb489cc45bbdf70cd6f569f3

  • SHA512

    639aeb691967854bdbafd741b7060fb1d28c69b1e96494ffb5eefcfb0d772dad54f87ce1a4d72a98aadf611b0215b84ef7b2d631806eb5444d7255404ea2f54b

  • SSDEEP

    1536:IMp+aN378P692+yUI9cYmrMmfRMb+KR0Nc8QsJq39:gaN37u6s+yxStrMmJe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.113.145:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2dadb9296bd84024159fe9cb47d3431dbc4c567dbb489cc45bbdf70cd6f569f3
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections