General

  • Target

    ca4d7b61ab00b70d86a0e2d3699d938e.exe

  • Size

    72KB

  • MD5

    ca4d7b61ab00b70d86a0e2d3699d938e

  • SHA1

    29c1433ccf89f21646d9a041f118d19cb169cc6c

  • SHA256

    86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891

  • SHA512

    b2c0353440eb06a4bd5e88264915ccfe9a4e153619f9722a842d0313ccb5cc6fb2d887f400830b7e58f8f5afcf03d74aa6fca87747b27dc5546d605e5db74df3

  • SSDEEP

    1536:IAgOq+vPocJ2VRwx3MJY6WEydMb+KR0Nc8QsJq39:1nq9cJ2E36Wrde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca4d7b61ab00b70d86a0e2d3699d938e.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections