General

  • Target

    windows-meterpreter-staged-reverse-tcp-443.exe

  • Size

    72KB

  • MD5

    37966f9953839b3b8a5d794a03f50451

  • SHA1

    f2d6e23847e5572ac7c7ce112a42006eaeb5a817

  • SHA256

    760ff44acb22d814e26a92d13f0469427c6cf3eeda2027e0503c400367ef5bc3

  • SHA512

    d622ad8fcc2bb7c79106f28586901501801eba2f8ccf2e0e445375032e036512d3c98d6618c78963723ed6f8f451a51a7a231990d87335f2934a4a670a0539e0

  • SSDEEP

    1536:I0HmntotmmOFchzz/uJNB3Yae4Z/FMb+KR0Nc8QsJq39:DHmnt+h3m0+Fe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windows-meterpreter-staged-reverse-tcp-443.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections