General

  • Target

    40a7f670cf5010b51f686896cb477850N.exe

  • Size

    72KB

  • MD5

    40a7f670cf5010b51f686896cb477850

  • SHA1

    b06b52216d72f91d105a71562cd66cfa41bbb144

  • SHA256

    38eb9eb5b2320180e1ecd819109e1b223e425f41859ce12176ac387cf74b1f9b

  • SHA512

    c12a5ccdee21c72f14a826822c6141861c1883f43dcf3be6ca91a60fc35144a3010d22901e741ff6070eccf1c296c00e785c4b8906909faae579bad636a0078f

  • SSDEEP

    1536:I9vCKYkOHVWaqlWY1kCpUMb+KR0Nc8QsJq39:Zr89l2e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.20:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 40a7f670cf5010b51f686896cb477850N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections