General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    c0710742676885e51271c63f7ec38ef4

  • SHA1

    45f85bfb14fcc3e0aff1b94f80b039726a381339

  • SHA256

    86234b5fbad5a90bcb6274805b52647384f54d5d3ca7a67d5ebeaff0feb5d312

  • SHA512

    b2bc3c2872bfa55fb23bb3e6310507da5465a536fb12f3dd48a5edcf934308d3c77f64f3d87cde766e0603dd1c7d1b6d635483579111f8d75d8a4f4fa745a5f5

  • SSDEEP

    1536:IKoafC2/q6pp7KtBUJlKj7HpkMb+KR0Nc8QsJq39:nRCCFKXUJlKjbpke0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.78:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections