General

  • Target

    1c7b65a4c5bdf5a64b6daed2fd302ab207dbb3a4dbfef1d5dbb0e1e06dbc125e

  • Size

    97KB

  • MD5

    dd1eb133e1d6b40957fb79905caad1ed

  • SHA1

    21a98a90e015385c98886bd7dc4614738d1f89c6

  • SHA256

    1c7b65a4c5bdf5a64b6daed2fd302ab207dbb3a4dbfef1d5dbb0e1e06dbc125e

  • SHA512

    0e4ee93d9506fa43b946a4df8b0cadb0cfdcb25d9124ef997e7b3d29ea2657fab5bdf0b2c2facfa056bcc5a01ff245bb4ec12dcb93871b473dbdd50a0832e63a

  • SSDEEP

    1536:7xBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZivCBj:71fSvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.198.129:4311

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c7b65a4c5bdf5a64b6daed2fd302ab207dbb3a4dbfef1d5dbb0e1e06dbc125e
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections