General

  • Target

    3eec0a56659648934c1869e2f75ddfe2b6982687467c006f10f5abe09372740eN

  • Size

    72KB

  • MD5

    cd36b530b3061251ca4a75c8a57e64f0

  • SHA1

    fc0332ef5b87578f70b1fd163b8ef05c6bd9d73d

  • SHA256

    3eec0a56659648934c1869e2f75ddfe2b6982687467c006f10f5abe09372740e

  • SHA512

    63ecf3e7db6a939396be5f1db232c62cfd60247ea68b6c15599971ebb34a7c4de4ed41af6ef61d9810185e6abaf525d379049e6e8622dd2bdad68bf2e632ce2f

  • SSDEEP

    1536:IAwo0+ALKz6FCVbi7VsMb+KR0Nc8QsJq39:0+Ic6FCdi7Ce0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.101:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3eec0a56659648934c1869e2f75ddfe2b6982687467c006f10f5abe09372740eN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections