General

  • Target

    4e71ef228533e22fcfec123828e9e8b0N.exe

  • Size

    72KB

  • MD5

    4e71ef228533e22fcfec123828e9e8b0

  • SHA1

    4f1c376e94666497dfa8a470a944816b94d19c1c

  • SHA256

    0aca07372ba410198ab8478c4278c536f815e01cd3d436bd19620ba55bbf6f37

  • SHA512

    0c8bc8b8762f0b2a93a96ca6697dd6ea5ba02c04b13c5ba63bfe3951a28f5cacec4691f185f2f11dd63f3060186673095cdbe8d6d918bf5c8df96e2e101393f2

  • SSDEEP

    1536:IMAmbhZS5BDWRk8cqurMb+KR0Nc8QsJq39:zPq4Mqee0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.234.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e71ef228533e22fcfec123828e9e8b0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections