General

  • Target

    b3720e637e6d2cfe63df3453912c0bd0f40909315a1ee1611c650b943bd6df33

  • Size

    72KB

  • MD5

    4830b1459a97d559bf6679a53b1e8a5b

  • SHA1

    d88ab973520086a7c9ca777c46d5684ca5a36fe5

  • SHA256

    b3720e637e6d2cfe63df3453912c0bd0f40909315a1ee1611c650b943bd6df33

  • SHA512

    a7d1eb9562ec459916f63eb2ff283997ebcb62eb982c729a4dbd264756523180d75ca8207abe270020646eb8d673f3ab2bc763f0fb36a254995297dd12fcb338

  • SSDEEP

    1536:I7vc5UP1D9uivi1TWaI6HkOMb+KR0Nc8QsJq39:CcmP64gkOe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.16.18.110:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b3720e637e6d2cfe63df3453912c0bd0f40909315a1ee1611c650b943bd6df33
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections