General

  • Target

    4155a12c601fdf9b7aade2731719ec65032c77edeae99e5aceba7b0e1b98360b

  • Size

    98KB

  • MD5

    82b4c5a458013afc4ba8d0dd281b1a8e

  • SHA1

    43594cb08b44eb4ac4bdd565db50e145986bed23

  • SHA256

    4155a12c601fdf9b7aade2731719ec65032c77edeae99e5aceba7b0e1b98360b

  • SHA512

    5c37a6490d3b00fd7332a6ba7326f38d4528a03d88d98448ac2a1a4ca4c389bffbc9a8bb34447a9751b88c4f2c52162aa77a99e11b69be3f2817bc3361dd3f68

  • SSDEEP

    1536:W35QncvQiiWTkOJ5cBiLePs131s7mG8LyZoY7br:WHMMY7v

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.31.138:2109

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4155a12c601fdf9b7aade2731719ec65032c77edeae99e5aceba7b0e1b98360b
    .exe windows:4 windows x86 arch:x86

    6919fb15d91de314f219a6be99a4357d


    Headers

    Imports

    Sections