General

  • Target

    malware_sample.exe

  • Size

    72KB

  • MD5

    305c62dc6b1d010c2f4825388ff25420

  • SHA1

    88905ba91841d59f1316fab661fac5a56e15a746

  • SHA256

    e6fd0c30073e6dc96d0a436e05345c9c4b68f86dcaad99cd04ebd61957ffa80b

  • SHA512

    c4ff6df063ea607014063e6aeb1caba5823ca12af71cc9d538ca53b3e84e925612d667d4e7f5d7c83f62a49f26a8ca88c9d2396166041da73924e861aef05b90

  • SSDEEP

    1536:ISBW5zRGPMk9ecerRSVFhD+zAMb+KR0Nc8QsJq39:jWbG0k95erEVFkMe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • malware_sample.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections