General

  • Target

    b158f31f5c69e624daaba879000f2ee6281978400a6b07e781e9a415e7bc7a80N.exe

  • Size

    72KB

  • MD5

    4376a535bd0109d857bd9f8b09cf5240

  • SHA1

    b8a26908ae49661151c443ebbc35aecfe5ead4b3

  • SHA256

    b158f31f5c69e624daaba879000f2ee6281978400a6b07e781e9a415e7bc7a80

  • SHA512

    72ecf911031b5323d1c7f301ae90a4ddb04cf752454a1fb8f7fe71b96b74e10e80bacb0685517229596f93b64dedf9779380ce466e187d7f091d6062a61cd26f

  • SSDEEP

    1536:I8qRylFZ+rn3RsVHIQP0Ib4WY/I1hcCHLMb+KR0Nc8QsJq39:pqYFg3G5HP0Ib4WYg1zHLe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.57.14:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b158f31f5c69e624daaba879000f2ee6281978400a6b07e781e9a415e7bc7a80N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections