General

  • Target

    ebbb15b5c66c0d22100a1c8e1deb0a80N

  • Size

    72KB

  • MD5

    ebbb15b5c66c0d22100a1c8e1deb0a80

  • SHA1

    c5c7d56e84dccd6480130b991e11c4b231b25482

  • SHA256

    bc9a0253576f310655a84dbc0dfc63adf799325c890e2569416b85216eac3676

  • SHA512

    6a982d08f8698ba9e3fc67a231df55b1257e03b438c20f5a0e15b837a58a33a730c9f4092b83aaeaa9b9e2800e54bcd667c10e2e8e2ad74fadf54eb89752523e

  • SSDEEP

    1536:IpJGlGJNZkrXaDyrgmfchgjfeMb+KR0Nc8QsJq39:qJGlGNZmKDFmfugjWe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.2.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebbb15b5c66c0d22100a1c8e1deb0a80N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections