General

  • Target

    test‮txt.exe

  • Size

    72KB

  • MD5

    2db22520dd9b1e8ac7be1c681dae7d01

  • SHA1

    e791c3b894070d09fcba8a38fb72778e202aacc8

  • SHA256

    f45933fcabca19eb0ae999d63fb0f7e311a6eac185cbaf560f7f867a741367f7

  • SHA512

    9a17c31ce66155f54a8857185433f3a6e4d1e3b983f6f5408c4d3cb33622aed2e4ec19f49f03cbd73501ca09328deee1b4b9a835c535d12b01e4a1e0ff3c1aad

  • SSDEEP

    1536:I3kr45rB/y2fW264jq70FyWXJCKcHeR5Mb+KR0Nc8QsJq39:OkrUw2R64M0pCKdne0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.170.0.9:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test‮txt.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections