General

  • Target

    ba2b11317804b758e96673fd43b9a2e20b57c1c90a1fcac1ac3d1f5612d4ff2f

  • Size

    72KB

  • MD5

    cc800d2ff6d8d1c1b003854c58f78e93

  • SHA1

    efc05f81fd1357bb57949b165414354161f14212

  • SHA256

    ba2b11317804b758e96673fd43b9a2e20b57c1c90a1fcac1ac3d1f5612d4ff2f

  • SHA512

    2f5b4751d61d3ea676038ba2f3ff2190830f6db2acec870b42653b9dc219b5c0bd746edcb462dc87cff2dc3de83b601be0a1ec48bb8701ce9ad6fe11cfdd30ff

  • SSDEEP

    1536:IVlsXuUj0FXds9ktqa0CkJ51qIp4ajCKMb+KR0Nc8QsJq39:2xUoFXOwqbCQ1KQCKe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.78.47.125:9003

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba2b11317804b758e96673fd43b9a2e20b57c1c90a1fcac1ac3d1f5612d4ff2f
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections