General

  • Target

    41c3d9ab929cf5f4d9f7553cf323b976691f832e5a1a9fdfd865a7a329ade40b

  • Size

    97KB

  • MD5

    3fd51ca2cd0fc34e29e84961905368d6

  • SHA1

    0e4d7dd801f0898a7dee0e254b751fff5eaebfc9

  • SHA256

    41c3d9ab929cf5f4d9f7553cf323b976691f832e5a1a9fdfd865a7a329ade40b

  • SHA512

    38e8e1c59ffed184fa4b98d778551b77d866bef8676548e3e0aaef01f72994ef8e7e2f5946a0d0e4e9c666ddd9133d4a5849f594f76ad7d8d33a7fafd2b1887a

  • SSDEEP

    1536:+xBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZ3mPkQ:+1fHmPx

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.44.130:2127

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41c3d9ab929cf5f4d9f7553cf323b976691f832e5a1a9fdfd865a7a329ade40b
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections