General

  • Target

    b40e4e11e4115ba15fc59efb7f7c2080N

  • Size

    72KB

  • MD5

    b40e4e11e4115ba15fc59efb7f7c2080

  • SHA1

    99aff91a2f231807386472701a467e82d01da314

  • SHA256

    27bb6fa4016518973cf81ae21a0f3d6bcbbcd54f5d764b354cbbdc5fc6d238fa

  • SHA512

    96211160d7473ed26b06965c2674aa8ec310f8aac5fc5e37c17e92abccb354138e9b296f10dd1a1a85316d14668a739092a3b639dff3d8236d8d32bd45a07528

  • SSDEEP

    1536:IETXaMcOZSP/x/Q+B2cP0Am+vkQMb+KR0Nc8QsJq39:zzxxZSR4MpbTe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.137.75:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b40e4e11e4115ba15fc59efb7f7c2080N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections