General

  • Target

    15ec014b9481ae998e2e98d8f12da4f0N

  • Size

    72KB

  • MD5

    15ec014b9481ae998e2e98d8f12da4f0

  • SHA1

    abc56cb334e4b3d8d9864761f8bd9b91f594a523

  • SHA256

    76455610014ea04e97198bdafa9bbababd7380c34d5753535b1a2ad8c8722c02

  • SHA512

    b2e8392195258f9cb3727bb8e08f1d6e070972c3999f930b58f86a65655290d3d889ff97261f883454e2cbbf71c7c1bea65b8789189160d8902b2c03a7e3d56d

  • SSDEEP

    1536:IVUwJvEuniHq7wNAUM4j2rx0vcZMb+KR0Nc8QsJq39:yvXiK7A2e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.34:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15ec014b9481ae998e2e98d8f12da4f0N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections