General

  • Target

    c1ec73b5adc1a80edebb860dda4829bdf4ed1ef035497644d848e7038531fdef

  • Size

    97KB

  • MD5

    38d17414ab6a5ffebb6680e01c0566f5

  • SHA1

    da7436b13d5e80b89d1c75e7e9d11b2b9900c56f

  • SHA256

    c1ec73b5adc1a80edebb860dda4829bdf4ed1ef035497644d848e7038531fdef

  • SHA512

    c6db5413e148f58b27103d54f1a63844316e2beabdd2baf743795f168726e6aeaddf4bd31e761dee0635e59a6b076429ffd2fe4430c73052cd6f0bcd31c4c23c

  • SSDEEP

    1536:+wpAdNQncPQ8ihAkOJDBNGePs1PYs1mGTLXZ3mHAz:+wpafYmHAz

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.10.131:2422

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1ec73b5adc1a80edebb860dda4829bdf4ed1ef035497644d848e7038531fdef
    .exe windows:4 windows x86 arch:x86

    63367d0e1a30cb432e92c34d319cdda2


    Headers

    Imports

    Sections