General

  • Target

    f6486ab9b269393ff7f5da4d44904494e4ebbf4a6bbac742f8ebf008709f265d

  • Size

    97KB

  • MD5

    2b8f09f838d477cbbab849d37bd0a813

  • SHA1

    18612a973f961f96fe35502594b4dbd35eabf25f

  • SHA256

    f6486ab9b269393ff7f5da4d44904494e4ebbf4a6bbac742f8ebf008709f265d

  • SHA512

    75c6140f0aa867b25e0fba5bd84583ded2df18f6dd0cd9cc118ef615a7e6b7c97ac485b416a6b81d69aa8c7dacd0cf9c94a9db18c3f793c2ba210e1cdd42267b

  • SSDEEP

    1536:PxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZgvCBj:P1fQvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.180.129:4319

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f6486ab9b269393ff7f5da4d44904494e4ebbf4a6bbac742f8ebf008709f265d
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections