General

  • Target

    cf80605f4611fe7d71a6f3e0bd4014e8fbb412f64bbcf50cdf7456a61ad3babc.exe

  • Size

    72KB

  • MD5

    2bf2123730614e66c7a5b926a7eea340

  • SHA1

    1d5f0e337900fa734744449e8ca84352c95ae0fc

  • SHA256

    cf80605f4611fe7d71a6f3e0bd4014e8fbb412f64bbcf50cdf7456a61ad3babc

  • SHA512

    7e0d0ba1464e7952de1c635910b2ef7de12f6c66f2cd4b18e721610c222bd9b1d439667e8e49b561c872790395e5dce13e28eee089ef80a12bdb3b8a3a983607

  • SSDEEP

    1536:IPB1LM/Ylru/TVK28soM1lCqLPZpuNMb+KR0Nc8QsJq39:oQK2f1lnLPZp0e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf80605f4611fe7d71a6f3e0bd4014e8fbb412f64bbcf50cdf7456a61ad3babc.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections