General
-
Target
d517da33e9e6cc64f88d524781027bd156573999152a2f557c83c21517b0d852
-
Size
54KB
-
MD5
3eabeb9e3825ad3a1d675d60553055d3
-
SHA1
0b93569da80b2f63025da84946f7993b8672e0ac
-
SHA256
d517da33e9e6cc64f88d524781027bd156573999152a2f557c83c21517b0d852
-
SHA512
a42f1db38ef2c38897d6b064724e85ef4a29e2137b1a481bf0d8ce34967a3a2ef824c177e5ba23a589430b1547ffd63c0f62e04d6b0d482561ed328ef14e56ec
-
SSDEEP
768:3qcyGIkugOdb8lrV6mDEHR1tuN5DQVC7S0oPL2D2ntHKQgIYCH0I+kW947f:bjI1gOdIlromDN1skS9tqQgvCBj
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.9.129:2210
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
d517da33e9e6cc64f88d524781027bd156573999152a2f557c83c21517b0d852
Headers
Sections
-
out.upx
Headers
Sections