Resubmissions

15-09-2024 07:06

240915-hxdvzs1fna 10

15-09-2024 07:00

240915-hsr7ta1hkm 10

General

  • Target

    payload.exe

  • Size

    72KB

  • MD5

    4911f5b6c641dfe88ab713c41b587e96

  • SHA1

    b4561cb5074287f78a0a6c184f612c63aa6066eb

  • SHA256

    76b04644338423c6ef1e5f584592d068f06ea88cfbc70c1c357cb716ddb82cf1

  • SHA512

    ae4297d09eb77d5c69ffa68912176a4544cf241bcd918c8e81d24cea1aea2360d255b913de550bb2886dbf7517a1e888fb4f301aaa47cd17b8c21ccd845ff9e3

  • SSDEEP

    1536:IAn2lP0X4WBs6V2hsYrpIMUEQbjtQMb+KR0Nc8QsJq39:ln4MX4C32RKMUQe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.120:3344

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections