General

  • Target

    0d1c8aeb4e3889c7d95d678b4988b7d0N.exe

  • Size

    72KB

  • MD5

    0d1c8aeb4e3889c7d95d678b4988b7d0

  • SHA1

    a9c357167fa1073edf3090020e40fe7aae579f05

  • SHA256

    6eb7f88580e461d46a728d03c566c5fc8231ae312c6fbd511205d514f16a5080

  • SHA512

    80c20d6f49293583b0091c97509d27342d82ce3223568a3e64c05b332224da00ad68523d0184b1543414ca095079f65b3b43cf8104d573d1d92a7c2465c41aa4

  • SSDEEP

    1536:IAtSiLHnE61nPZTJIQttKQX0kaMb+KR0Nc8QsJq39:Zy6VwFQXXae0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.20.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d1c8aeb4e3889c7d95d678b4988b7d0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections