General

  • Target

    3a1185d31745e128cdafa7de689c04c1df404e6a76ab93ee3706e7a05d746a8dN

  • Size

    72KB

  • MD5

    7ae49eb8ee5ea69b9ddcc543fd5fc730

  • SHA1

    2d17d1bd04a94bdb9a57879f96d246093ba673da

  • SHA256

    3a1185d31745e128cdafa7de689c04c1df404e6a76ab93ee3706e7a05d746a8d

  • SHA512

    20513583fb51712cb323ad3602bb2602746bbebeb11702877b7e77fa40e70935d1b2993f04c08d1411438de74241f57d8f7b1d6749f473c94bf99bfdddd13535

  • SSDEEP

    1536:IB70oObeaM3NU84h7FbvnYgMb+KR0Nc8QsJq39:+7x+uNItYge0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a1185d31745e128cdafa7de689c04c1df404e6a76ab93ee3706e7a05d746a8dN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections