General

  • Target

    a79106ca2d9f8a752a91502bf496352c3ad3df80326cf9d36d09376c7da95342

  • Size

    72KB

  • MD5

    1373dbd5fb4e440ac1af5ab204f800c8

  • SHA1

    ae77523e69d5592020b3af3cac95682b5590e038

  • SHA256

    a79106ca2d9f8a752a91502bf496352c3ad3df80326cf9d36d09376c7da95342

  • SHA512

    8066225d044381de835e75b4e58e1bff9c6d5905ef303a7946b9ba99b74850aa27b97029c8103391335fe2f6f9d5e0236702ea8bfe25cf4a54e35d7353e4812a

  • SSDEEP

    1536:IgvpZpCIn4gNcHEgO+3w/LGs77YMb+KR0Nc8QsJq39:xrolgNcHZyLGsIe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a79106ca2d9f8a752a91502bf496352c3ad3df80326cf9d36d09376c7da95342
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections