General

  • Target

    419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e

  • Size

    72KB

  • MD5

    c6b7f6fef7a07a467e2fd5e6541782ce

  • SHA1

    319c1b77df40ac43d377170a6b9e13805d54916e

  • SHA256

    419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e

  • SHA512

    e52c4503c7cedc252a47cbe9d0629d4b31a6e22783e4d25623bfb2633abe8186de966fab905a5b4083d87eaa795a809706a5f5148c67ffd9a3762a6ab8702914

  • SSDEEP

    1536:IJX24rWVq1Xxr0E44Kd8nEPbdIqDl4z8HuW3Mb+KR0Nc8QsJq39:q22WVq1Xxr0h4KOMIqhfuW3e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.11.33.196:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 419490f8184e425c9d2c47aabc49f838635450658d02e153daaaa035f963989e
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections