General

  • Target

    096ca9783dbe08b8ac9c5a08e40056a0N.exe

  • Size

    72KB

  • MD5

    096ca9783dbe08b8ac9c5a08e40056a0

  • SHA1

    5aeb0f8b6cc290942f8eb072fc43fbb6b07b3741

  • SHA256

    19c122a47d60129d4768c23c8c562180a197b530727ce26329b048c8260029d1

  • SHA512

    14f881b4b6199f69d5ffb7e65440c7223f3b8c17f46774048cc559098c6c295b46acc83a42d8c7358ce393c1accd11ec38750f9fc8c8f1fcab460f079a976d0b

  • SSDEEP

    1536:IxjXnymMgbXGWiW/524p7GMb+KR0Nc8QsJq39:ejPbXliq526Ge0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 096ca9783dbe08b8ac9c5a08e40056a0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections