General

  • Target

    eb35066d1e1c13fccc7d0e8700276529eb8d9c840f3bd77859210e0d74371ca2N.exe

  • Size

    72KB

  • MD5

    f427fe79fbf3d945136194da63498550

  • SHA1

    838ba81909d79f9d746251a44760ab8cd55354ab

  • SHA256

    eb35066d1e1c13fccc7d0e8700276529eb8d9c840f3bd77859210e0d74371ca2

  • SHA512

    d5e6e75545b3a423b8feeb51fef87f1afbf3f67a9250b396503cfdae0adbea1aa804cb13d1081b309f723244f8e3e77668aecc30168c7a28f1beda3b85607b19

  • SSDEEP

    1536:IG/Bbg1DwLEZoXi9O2FkO8yiuoMb+KR0Nc8QsJq39:VC1DhZoZ2yTT9e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.50.1:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb35066d1e1c13fccc7d0e8700276529eb8d9c840f3bd77859210e0d74371ca2N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections