General

  • Target

    22684dfe0e32d464893d88964720d610N.exe

  • Size

    72KB

  • MD5

    22684dfe0e32d464893d88964720d610

  • SHA1

    49a8b2cd74681e59caeb05ddb138d59470662963

  • SHA256

    58d2fecddc8fa8ffdfb668ea3ee2e75796462010ac5a4f877638ff300bfc708d

  • SHA512

    341f7994c82d0449b3a63c3851dfef751f592837b3c7b80d987a61d003669b7598fafc9760b521db4f402a40a533691f860b0f10b44e0ca456e4d049e2540e4e

  • SSDEEP

    1536:IIOiNpGXZBZJDSTvbtyvoG4HUkSMb+KR0Nc8QsJq39:FhaXZj5qtyvESe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.7.9:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22684dfe0e32d464893d88964720d610N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections