General

  • Target

    Documents.1.exe

  • Size

    72KB

  • MD5

    5ed596968000a68132c532f48762d82f

  • SHA1

    55efe5c5f4f24ffcc4c9988b8d1305aad9a93707

  • SHA256

    d31ffc39de5e232e602b1bdd599b093778786f5876be835cf23d9bb954a26dcb

  • SHA512

    88f00222c4cc792cf6fad0d23c25d1fe6388bafb5e39504c4f266b9115aad4365eacac93df4bb7ebe22710a9b357dca5d5b79085e09fc2d73c0c5abe6196570e

  • SSDEEP

    1536:I5rDZaFlCK+XFHImhyaRNbrptHHyZSZyMb+KR0Nc8QsJq39:2kGXFHImhtRrvHyZSZye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.115:7700

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Documents.1.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections