General

  • Target

    Documents.exe

  • Size

    72KB

  • MD5

    69622bc5a1fc62775a2b77cc4bbbdc00

  • SHA1

    292b6f92bc84cc05f531ab1699c137174028509f

  • SHA256

    763befb50d645b4adea19eed7fd9fde283b888665ff7ac83d78264d7c7db80f5

  • SHA512

    9da030c72ee62259a1367a57292dc51dacc38eb86a46c5e2efadf05f746194fa61d21d5809a51f0c7fe43e363bcf71beb770f0ec0357433ca2805366c6f7dd34

  • SSDEEP

    1536:I2u0zC2W8hrKo4/o8KKlHb4uMb+KR0Nc8QsJq39:fuGC2Wip+lH0ue0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Documents.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections