General

  • Target

    b6c55cb3c8a3b1139fbfbfe31c3b81069930f256668d7c28d2d9612f3389b18e

  • Size

    9KB

  • MD5

    c7287df2c866dbca2bcf6dd7df9a4aaa

  • SHA1

    3f9e0ccc00cbc53970ab0d4994b94efb13043bad

  • SHA256

    b6c55cb3c8a3b1139fbfbfe31c3b81069930f256668d7c28d2d9612f3389b18e

  • SHA512

    436a971fee8a0de2f6067dadf0073e7dc008ff217b78fa2fa88717b9d8528be1b9bb1009f5564719e10cc093cf28a5a5efa629a4b2ae0a246530c2476e8d1d0c

  • SSDEEP

    48:q0kV3zU9G4aNVh7XphlhEF57/nGhZoKEvDFbOE:vDIK6or

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.45.193:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6c55cb3c8a3b1139fbfbfe31c3b81069930f256668d7c28d2d9612f3389b18e
    .dll windows:6 windows x86 arch:x86

    57d6e7112c8e716cfe2eb0ff9f36763c


    Headers

    Imports

    Sections