General

  • Target

    Trojan.Win32.Meterpreter.O-cb044fcd02f3eef320c79cfcce2f28e690b88172e5af77fdc1716a071461da10N

  • Size

    72KB

  • MD5

    ce38fcf4273d92c605286df44d28eb50

  • SHA1

    14dc27dcd11fb4ddd2b14e7ce1370629c7afd0ae

  • SHA256

    cb044fcd02f3eef320c79cfcce2f28e690b88172e5af77fdc1716a071461da10

  • SHA512

    451dfca3fbcd99c5857a63e3388bd1f49da90b2c9a93c050601b254b86283565effe201d5820f987103dfcb573c52631f8341f425a3d8b438ef2c2958d3556d1

  • SSDEEP

    1536:IQx/vOdR1SvlEZxZjZd3LH4GNLxRYKNMb+KR0Nc8QsJq39:l0RsSbtZdbH9NvYKNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.137.129:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Trojan.Win32.Meterpreter.O-cb044fcd02f3eef320c79cfcce2f28e690b88172e5af77fdc1716a071461da10N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections