General

  • Target

    115d22e20b86dca3fcc58639104a4faa0f4d83d037b0dfc86274fbc457c8100f

  • Size

    72KB

  • MD5

    e364b66f8234bb8989cac9a2c1dcdf34

  • SHA1

    3c1157d575916623557d62e3157eccb43d1ad40c

  • SHA256

    115d22e20b86dca3fcc58639104a4faa0f4d83d037b0dfc86274fbc457c8100f

  • SHA512

    66edeb73951c86e58cc7434554fa6a05050d8c590310e990dee6c11dd74499ee1fa1c12d242daab4ea2764e5dfe0084c880860845f6bab53853a8387e35b26b7

  • SSDEEP

    1536:IXmyKw9CuNjEY/Fg4ubAcfcezI/1a2GMb+KR0Nc8QsJq39:SmHwoeClvc2I9Ue0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 115d22e20b86dca3fcc58639104a4faa0f4d83d037b0dfc86274fbc457c8100f
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections