General

  • Target

    4f1424363403e3cd599547f7381b38a0N.exe

  • Size

    291KB

  • MD5

    4f1424363403e3cd599547f7381b38a0

  • SHA1

    6ff2a8b806da95d0ceae0cd9654f0af9fba41b10

  • SHA256

    eabe41fd5f8de1963e85cedd330a8d2f9380687bd81369f1cb1c58aa333c56fc

  • SHA512

    6b850f072205af651265d6ab7f1642f1d11cd060d731a6ee8798fa43d4b3b60f424cd7b2878c4331b4d1180635f418f51a036e91ba667fe3f931c5eebbe85fca

  • SSDEEP

    6144:9VtEJ2SJViuBQIJshK7OtPRM6NwExpEPerjMddf1Gga32qKL/UrTk:9DS2S6uBQK7Oo2dxpE53f1bVLcr

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_nonx_tcp

C2

67.212.67.74:20688

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f1424363403e3cd599547f7381b38a0N.exe
    .dll windows:4 windows x86 arch:x86

    f433e7fcc51e68080022754836705744


    Headers

    Imports

    Exports

    Sections