General

  • Target

    6b64325b2f588d588614465fe5334b7de0e8b991a05f13767563c5e28c7273bc

  • Size

    445KB

  • MD5

    122aa20f040b0ef76d24f0e62cb77371

  • SHA1

    2aade2696904ba9d6faa03ed129ab611418c2cd8

  • SHA256

    6b64325b2f588d588614465fe5334b7de0e8b991a05f13767563c5e28c7273bc

  • SHA512

    6dc7f9f6dfd272bb68a2cee7aa0f625ad6619085cf167b7f3a9def68ccaaaef49f14915b2e7cb0ba82470c707f3cc35c8aecfddece38044cb4f3d1642c1caf13

  • SSDEEP

    12288:BLlJPuUUSHJPhmAIRUl3NcZ+jPt5GN3h7QK+WqUlVYd:B3PuUUSpkY/jl5GNFQK+WqmVYd

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.116.132:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b64325b2f588d588614465fe5334b7de0e8b991a05f13767563c5e28c7273bc
    .exe windows:4 windows x86 arch:x86

    a839a3a88d63510bcb7e2dcdddf17765


    Headers

    Imports

    Sections