General

  • Target

    67017be4b86b77b8874e2603a62db930N

  • Size

    72KB

  • MD5

    67017be4b86b77b8874e2603a62db930

  • SHA1

    c260810843bb518d639353e76248c5d7acc885a6

  • SHA256

    d041f48a1189c2b03659bad70174c1cb4c21aa1b57fafc7c2bd57b7c16f99d20

  • SHA512

    4cb78d5072940341ce8a9a51812beb8a49677075da61728012e76584c4005b1d7d25f31b687d62a6815e10923ab619d0df5942ffb2640a5b0139485d0e3eb524

  • SSDEEP

    1536:I0PBJjiztphBE0sz/BfQV+y3TOAxtMb+KR0Nc8QsJq39:BXjWtKjrS3Pe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 67017be4b86b77b8874e2603a62db930N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections