General
-
Target
c41da41b25b065b0dcaac06a0c94999375507b34f92b8bc3ffb87f1d2a7eef6d
-
Size
54KB
-
MD5
99b7ff99bc5a082267430b445d6cfb4f
-
SHA1
dda1944a4c3b47af32a4ba2c6208b429be126df3
-
SHA256
c41da41b25b065b0dcaac06a0c94999375507b34f92b8bc3ffb87f1d2a7eef6d
-
SHA512
b9f5929184f74c952916dbeb871e99bc0160a7891900cb3ba720a635a70ac40be22129d4f12c18b5c122b5193873daeaebb896e0fef81107d6d5f2e91b0bdbac
-
SSDEEP
768:+qcyGIkugasGpbU0seJM8IYTS3Re93uZ+WggIYCH0I+kW947f:cjI1gadUDjYTSC3SggvCBj
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_tcp
C2
192.168.180.129:4319
Signatures
-
Metasploit family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
c41da41b25b065b0dcaac06a0c94999375507b34f92b8bc3ffb87f1d2a7eef6d
Headers
Sections
-
out.upx
Headers
Sections