General

  • Target

    704c1260c638b57175724260d81ece00e5fdfde29fba3232a43b255f1d08dcf1N

  • Size

    72KB

  • MD5

    f3e1d83222149ad63bc6bc51b3ea9690

  • SHA1

    f9dbfc55e214f6f27dc9baec6e9caa7106ef371e

  • SHA256

    704c1260c638b57175724260d81ece00e5fdfde29fba3232a43b255f1d08dcf1

  • SHA512

    bc055a409d2e590b5ebbe52458bcc604e30876650d464dc7bcce7bac2a87ef5a76b22da58aaaa842eb821207f6121cdc46fc329382d643bdf7511eeda36f22c0

  • SSDEEP

    1536:I991LE4HhmieI99xo8iGtBjSzZFFuu0qsMb+KR0Nc8QsJq39:wcQhmieIi8iGLSdXuuxse0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

3.134.39.220:16979

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 704c1260c638b57175724260d81ece00e5fdfde29fba3232a43b255f1d08dcf1N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections