General

  • Target

    fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493N

  • Size

    72KB

  • MD5

    b6127eb563e60bd9e99303b6d7f378f0

  • SHA1

    634eb01322ee476bffc0de5ea72c2572f4f944f5

  • SHA256

    fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493

  • SHA512

    9306535250484c7daf482b1891b086c92c755eadfd28282f0f940848446fe06852fbb84243fb77e6c13580718bf797604174f2d083700a589593d916068dc1b2

  • SSDEEP

    1536:IURHnjgb/dr5MIOHAE2yVh7W2Mb+KR0Nc8QsJq39:Nn0LhGIqMyTC2e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.185.221.22:46209

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fdff7a37a71ff64da7cd4f915c64d3c3a2961a4c5aa4ee441ca4cd9bfd702493N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections