General

  • Target

    1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308

  • Size

    72KB

  • MD5

    b11efd812f8fd94f3385b3ed5dc525b7

  • SHA1

    a1b852d4b67dda370392579c1ecb571deb5884e0

  • SHA256

    1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308

  • SHA512

    a90e55e02a5e712356b31b48eb98b2fd551132d4d797db37358c7bf498e36ebaa4fd1c11cfbd5f0ec81284808cf4766fdfb499cf3ae74f1ef1043cadac8092a7

  • SSDEEP

    1536:IepVuWvRp+yTRMGNvgybv6lTKZ/3gw2eBMb+KR0Nc8QsJq39:Ppp+yaSvg+ooowde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.56.1:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d36ab82828ad9b7a65720e300ffc9c30916435675809672c0f836749ff5a308
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections