General

  • Target

    5fea20b0f03174324682cea590bb5e30N.exe

  • Size

    72KB

  • MD5

    5fea20b0f03174324682cea590bb5e30

  • SHA1

    20a0bb859084afc7ff9a22a57fb43a40a6ca0e81

  • SHA256

    724aef4f98e17df16a0064b4fd32210a285ccd9453adc2c6931aeb6b1d47d112

  • SHA512

    71060b1a08fa82955254f2643108a823b57d9e3af4fe2ae82f1077a214bec9c10e68abfefb792c2e3636d60189a87374423b7ed14dc3d1ff0ae43fd82c3ecfe0

  • SSDEEP

    1536:I47JfILvw4XO/yYpfsoUTH02eIT+Mb+KR0Nc8QsJq39:txIvhXO/ygfvQUL0+e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.45.165:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fea20b0f03174324682cea590bb5e30N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections