General

  • Target

    3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab

  • Size

    72KB

  • MD5

    44c443f8ecfd5cf16117c8fba528c93f

  • SHA1

    c085d9d2e649335abd25345f6c8dabfd08a6d7a0

  • SHA256

    3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab

  • SHA512

    77de16d43992547d4fb11d47342fde448bc0f65c8063325b4aefc7543258d0dc205ea772c798541855e4db5383afd92438f5e215472a9db921a47d7e0b588d97

  • SSDEEP

    1536:IZS6XlQnVgxNJBIDxbhr3e8WgbIa2FqGnMb+KR0Nc8QsJq39:GSOl06JBIDJh3hnsa2FqGne0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:12345

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f89dbd9ad2f7663dd8daf86a3654b9babe7fb5c1d35aa7a70dcaa15c904daab
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections