General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    3f147088c1d8dbe084a063ab5d6417f6

  • SHA1

    8749908374406db1fdadf8cee7e36af796553cd7

  • SHA256

    02b7967f093136331d0dd2900bd31572b28be3a907d695d8cace37a265baf302

  • SHA512

    77c1b6e258ae595f542db68e72b741b7ca81ecae56a1b49411e1446b0d9cbd99e7d1cff9254cc01a0f56ed2726f73069be13693a17f2ad041d523ec1c7bc7c3c

  • SSDEEP

    1536:IJK8eMs4Bj8CVqCUpPILcgw586PMb+KR0Nc8QsJq39:kK8e0jFV9WPIQ58Ye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.78:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections