General

  • Target

    e04df6cb2a9616157fb73d7d2af77fd0N.exe

  • Size

    291KB

  • MD5

    e04df6cb2a9616157fb73d7d2af77fd0

  • SHA1

    ca45245dbc0ddd20e7451fd29d1b7d0ac841aa69

  • SHA256

    7d29cf71fe7d030ed1476478d3bdd52595f782c1b9c88bb50b361927f19bd3dc

  • SHA512

    647d51799ec9fb4865f27b37799af8aef6b4cb21bb3451dda91d07408863ee2a52357aa3c0c521f1f465455ff11dfa9c38ca850d1bc9e8c53b4ccf2635f534ee

  • SSDEEP

    6144:RVtEJ2SJViuBQIJshK7OtPRM6NwExpEPerjMddf1Gga32qKL/UrTk:RDS2S6uBQK7Oo2dxpE53f1bVLcr

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_nonx_tcp

C2

67.212.67.74:20688

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e04df6cb2a9616157fb73d7d2af77fd0N.exe
    .dll windows:4 windows x86 arch:x86

    f433e7fcc51e68080022754836705744


    Headers

    Imports

    Exports

    Sections