General

  • Target

    62f2c3c1f11c2ac66e9c755dec3ab49a5cf2d732e22a71d44db5a00b564ff913

  • Size

    72KB

  • MD5

    dac7ffcb0844646ba715b3df810c70e2

  • SHA1

    68f04f0730c7043d18d1d0d5a85f92f827c7e2af

  • SHA256

    62f2c3c1f11c2ac66e9c755dec3ab49a5cf2d732e22a71d44db5a00b564ff913

  • SHA512

    931dfcdcced518338f02852c56e83977e8c2ac75660612206daa6ed88a4bee060926e621d5bc6a73ccb785fe1bc1809bf16713baa9f344f7b8a925a8676daa58

  • SSDEEP

    1536:Iaq4rOzbGrYcsr6eT91KZZCmP4w69BhUYMb+KR0Nc8QsJq39:z9OzbGrLsr6o91jmPPchBe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

193.117.208.148:7800

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 62f2c3c1f11c2ac66e9c755dec3ab49a5cf2d732e22a71d44db5a00b564ff913
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections