General

  • Target

    3266b1a833c9e9e9381d34f1ba218c53.virus

  • Size

    72KB

  • MD5

    3266b1a833c9e9e9381d34f1ba218c53

  • SHA1

    3fdd92aefb0aa91a0fc51e7b82a7f0418b018769

  • SHA256

    dc97bb6a3718499df9dc444089467a2a5434462a8347c3280215001b7577ec26

  • SHA512

    764fb367d8279df8d7e334d906acdfe70494c6378b493e6bb0ac354533fe406dbafb954118d57bea9d054bd645ee39c02d88a45968f6c173d33dec2a11e188ba

  • SSDEEP

    1536:IP0VidxiNcxZe0c8uJ4Mb+KR0Nc8QsJq39:uuidAYBc8i4e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.0.220:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3266b1a833c9e9e9381d34f1ba218c53.virus
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections