General

  • Target

    Meeting.exe

  • Size

    72KB

  • MD5

    1ebcc328f7d1da17041835b0a960e1fa

  • SHA1

    adf1fe6df61d59ca7ac6232de6ed3c07d6656a8c

  • SHA256

    6779bc4c64850150de694166f4b215ce25bbaca7d60b293fa7bb65e6bdecbc1a

  • SHA512

    0c537e8dbdf5de433f862a31fbcb5a709f7727783cb36f7ed3dcac1acb44d704d5ad570035259022b46a0370754d029f476ae40280983d1586de9098e31a31d6

  • SSDEEP

    1536:Imfnby2UHs4lwoK27TQPGjk8YXxMb+KR0Nc8QsJq39:lfnG/s4L7TfJYXxe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.115:7700

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Meeting.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections