General

  • Target

    f5c7bd1e322b68b07693ffa7894ce4ed1b51da98901c9ece4e8b0afe5ce0a423N

  • Size

    72KB

  • MD5

    7f5ef8811894d5c7fea4216931f89150

  • SHA1

    14bc255dc9020fc56b56eecd58fc2a9e72bc0ccc

  • SHA256

    f5c7bd1e322b68b07693ffa7894ce4ed1b51da98901c9ece4e8b0afe5ce0a423

  • SHA512

    f06e8bbdc31de1164fb6460f0a3b206adbdafa086f9a5d206830618e95dc735aa1daee3e4a826a9b935998a32d2ad64b91b65e83977af40a89aa1b07e3ac764b

  • SSDEEP

    1536:I4HJMgt6KWihwd2KRYxpoLmgUO1JQVBuMb+KR0Nc8QsJq39:iswvTO3oy+U4e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.200.134:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f5c7bd1e322b68b07693ffa7894ce4ed1b51da98901c9ece4e8b0afe5ce0a423N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections