General

  • Target

    192bcac9c38be70a3e627b333731bab0N.exe

  • Size

    94KB

  • MD5

    192bcac9c38be70a3e627b333731bab0

  • SHA1

    51e93b02ff981c60e2f6ef7bd724a7b7d0fd38bb

  • SHA256

    496d31575d4a9b8da67212ee862d754ac09612b8dd259d5f0e3a8654d924f2bc

  • SHA512

    8a2336a6b1f7052ef4907b58a589ecb20fe3fe97ac3d1f939b51516fd54bab487e218f51c91477611f03c4bf4b81d6e5ba89f9bcd22de6706109f5427e66cbed

  • SSDEEP

    1536:dxeFZ9iVPqPrLE8TjJpGoDIg+4z+jM94gqu2zLALPzRmDKq:dAFPip0rw83GoDIyRmeq

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.0.15:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 192bcac9c38be70a3e627b333731bab0N.exe
    .exe windows:4 windows x86 arch:x86

    2fe95afa932d4b1f14f75000243d26de


    Headers

    Imports

    Sections