General

  • Target

    4ee815c55a2b0ab6b458782c600ffab3b529458568b89fee4d4fe7e76503058cN

  • Size

    72KB

  • MD5

    b6f33745f43b569ba538351adff041e0

  • SHA1

    7d2937b69e8102c2f0d9f76479847cafe051159e

  • SHA256

    4ee815c55a2b0ab6b458782c600ffab3b529458568b89fee4d4fe7e76503058c

  • SHA512

    f84aff7b2a996c24d54a15f4fc3ddab1bf03263f48ff2bb0e9d316b6efe0d6c4d30b3b9faa899f4eef89628c49dd219c40b581a40cd101f5b6749aec343b86ab

  • SSDEEP

    1536:IUL3D3xjDuWHSs0kRDZrmg7ixiLtMb+KR0Nc8QsJq39:tL3DcYSIdQ7Ue0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ee815c55a2b0ab6b458782c600ffab3b529458568b89fee4d4fe7e76503058cN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections