General

  • Target

    b372eab366819553bf7cbae8153d23e0e001cc89c9620dbcd9d2ad74b98e10f7

  • Size

    97KB

  • MD5

    5f098196ed5498ffdef520af7d6f78a9

  • SHA1

    add5c0be2253b5bc1400200ac3e44eb5ef104a09

  • SHA256

    b372eab366819553bf7cbae8153d23e0e001cc89c9620dbcd9d2ad74b98e10f7

  • SHA512

    1e185f0703c1e3afd9e218fbcd18c5e410e1c368e366b38ffe433e604318317e774a7fc1d85094d9fddf5f50fb01e2896932fdc0b4b013bea30d3890966c8ae7

  • SSDEEP

    1536:pxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZFvCBj:p1f1vCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.109:4316

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b372eab366819553bf7cbae8153d23e0e001cc89c9620dbcd9d2ad74b98e10f7
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections