General

  • Target

    3a430aa6d4b4e94a6134c0066de1e922d3c6209ee82aedd9b2a1e48589f7a47bN

  • Size

    72KB

  • MD5

    90a114303b54105fd81a5403e1dfb830

  • SHA1

    1572d6d055127596c76e68fe1fd719569d246382

  • SHA256

    3a430aa6d4b4e94a6134c0066de1e922d3c6209ee82aedd9b2a1e48589f7a47b

  • SHA512

    2bd646b21f349833f3db143e88df874173746a892d4664aaede4d247ef82d54dc8b15dea08ae1317a941749d0a91748fa8a1b6ef82761dee517f038b1dd5fa00

  • SSDEEP

    1536:IcXIcJCCrwMTT1nn0chvTx1QZc59x7+Mb+KR0Nc8QsJq39:FXIcJndnjF7+e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a430aa6d4b4e94a6134c0066de1e922d3c6209ee82aedd9b2a1e48589f7a47bN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections