General

  • Target

    58df44413e11985fd34879d2067eb314c300ffaf4583b04eff944a0717ea732bN

  • Size

    72KB

  • MD5

    647efaabdd65c8fa06eecb033a38a700

  • SHA1

    f10d670e88e833dead521fe825b76019136bb45e

  • SHA256

    58df44413e11985fd34879d2067eb314c300ffaf4583b04eff944a0717ea732b

  • SHA512

    ae665ac4fb016f9505fa9763be7ec1efb8670ab65fefe85532577c52729e352b347e4ed0e1d90fa8f7fa2dc2ffb67a8b561794e1a79ccec3592b0e3b7d1e37fa

  • SSDEEP

    1536:IJ/zmiSPXIe2YS+gnfR0dcGDf5A5MlcuMb+KR0Nc8QsJq39:G/aXPvwJ0JDK5Ce0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.25.10.168:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58df44413e11985fd34879d2067eb314c300ffaf4583b04eff944a0717ea732bN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections