General

  • Target

    b293853399f5c9307f4856085aecac7ff4c8f5efd73e4e2ae5a60733ba426d57

  • Size

    2.0MB

  • MD5

    fd36855ec7e25b6c170328e032624e5e

  • SHA1

    e90a8c73451318c7a912bc60306fe98e94aaf63b

  • SHA256

    b293853399f5c9307f4856085aecac7ff4c8f5efd73e4e2ae5a60733ba426d57

  • SHA512

    ee570687b1e8381d2d652d386c482bede0f35941f6cfe191c8fcfe0da65562afea10f987278f306eb6256d34784e0e1433fab5f834029dc149c7692a974bd080

  • SSDEEP

    24576:IsVJcB+fmZhhG/tp4dk6jUaSfH+yLyrAR6CvkolnSnSD9BYQ5m3P3V:sdk6jUaS2y2rcvBlnSSD9m

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.76.128:4312

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b293853399f5c9307f4856085aecac7ff4c8f5efd73e4e2ae5a60733ba426d57
    .exe windows:4 windows x86 arch:x86

    1071754d325ab07b00d97b1579fc2aef


    Headers

    Imports

    Sections