General
-
Target
3dcf0b2d4ef4151d2f12d13b956332601e6beae45a842b4cb54c6677d0c350f4
-
Size
54KB
-
MD5
970a9b524372ccbfade49cb9a26d0b36
-
SHA1
b36bf86ce981d27241fe0459cae9cb05898bd524
-
SHA256
3dcf0b2d4ef4151d2f12d13b956332601e6beae45a842b4cb54c6677d0c350f4
-
SHA512
4739ad6c4f706dd1e7d257a2e82c4100d29a063eedd56c73a5df821e26f9b822adabf5589f3eb074621c9b918866a3b69d4a08332fb47be1701025664700e8cd
-
SSDEEP
768:fqcyGIkugnNlfRGhFPNne78tvVbivBwJWqhNTziYENGgdIYCH0I+kW947f:zjI1gNl8hFVnBEv2JvbziYE4gdvCBj
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.109.132:1326
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
3dcf0b2d4ef4151d2f12d13b956332601e6beae45a842b4cb54c6677d0c350f4
Headers
Sections
-
out.upx
Headers
Sections