General

  • Target

    1b9bc1a8ede98f0e4606b62169c4c3ce8d6d33fe5e3a5a2796f1f79244bed167N.exe

  • Size

    72KB

  • MD5

    0f6f840d5ff6bb723e807f9c773d27d0

  • SHA1

    1097b7eac32298efdeb9901a0dd2bb3a77c02865

  • SHA256

    1b9bc1a8ede98f0e4606b62169c4c3ce8d6d33fe5e3a5a2796f1f79244bed167

  • SHA512

    18828b2ecdcd56f3379f58aefdd7e2ce47450d74eea6d2d4af7cb20bf945e7dad54b820bd01e37f762a345e2a5d5e44d5e7df1cab62d03c6ab3b0927318818d1

  • SSDEEP

    1536:I8FAHktjAdn6Phwi/tiDtLJP3fhhdR19Mb+KR0Nc8QsJq39:9FA8EdGhwfDtLd3fhte0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b9bc1a8ede98f0e4606b62169c4c3ce8d6d33fe5e3a5a2796f1f79244bed167N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections