General

  • Target

    b5c9b4bb25faf1b1f1995877d1f98a1c9594158e310ba67dbb91cc57e1e7c6fa

  • Size

    72KB

  • MD5

    1d0bc7b4464394ba99d22fcb1d318ae7

  • SHA1

    f760cb76b52579f43dfea93e741ee0c773bb3390

  • SHA256

    b5c9b4bb25faf1b1f1995877d1f98a1c9594158e310ba67dbb91cc57e1e7c6fa

  • SHA512

    fa32b271bde1e9dc1882ac64c4c73eaecb973ac8c09c284f9de2cdfb0a03498790fca9fda634878c6749e3fe9ab92ce4284aa9a93d506c69c120d4aa4c0b9970

  • SSDEEP

    1536:IG0Y5hkWXl5ckMe6RSpCYdQabPGMpsMb+KR0Nc8QsJq39:R1HXzNMondie0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

202.151.176.76:6666

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5c9b4bb25faf1b1f1995877d1f98a1c9594158e310ba67dbb91cc57e1e7c6fa
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections