General

  • Target

    real.exe

  • Size

    72KB

  • MD5

    4950625f18fd455bda3707081b469148

  • SHA1

    acfa3e913a1d7f617117e31562456c036c494c36

  • SHA256

    cbe4bc5583fb70dd0f0998a7044ef7c1436cf1fd3a35da800e63048c58e4c734

  • SHA512

    76cd94045291f50fd789d686488e017cdf7dfabdd8fea5f642f1db13418e3f3d753804764a44f282ab1a2876739e048bea3ae0d79bfe2ac0d87f3af4a4ebd869

  • SSDEEP

    1536:Igq77AJ7O69oSCKmq/UCPt4kJyQnqUyNMb+KR0Nc8QsJq39:/qPAJ7aimXCF4b+qUyNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.6:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • real.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections