General

  • Target

    3acee891b41c4e67661f8c376bdd11071cdc92ab04497a367125d2ad951632cb

  • Size

    72KB

  • MD5

    465f275aa3a66d0210b8ea9daadd70ca

  • SHA1

    c62596ba08005dbe2757d33e730246e61a2bf43b

  • SHA256

    3acee891b41c4e67661f8c376bdd11071cdc92ab04497a367125d2ad951632cb

  • SHA512

    c4012c776e952fcdf503141f0a2d8594dbce156862a6331ba2f2127f72720602189eda8f6f808f84683f033e35647870e3e1e7614221a91704b376c126bbbbed

  • SSDEEP

    1536:Ii5me9q7W30VEpgWYtPq/qd5P09QMb+KR0Nc8QsJq39:Zn9GW30VEpgWQGqdO9Qe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3acee891b41c4e67661f8c376bdd11071cdc92ab04497a367125d2ad951632cb
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections