General

  • Target

    da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c

  • Size

    97KB

  • MD5

    75bafcc851a086147bcaf0db6bed22ed

  • SHA1

    283067587d5ac7058f526502679f33b3d95fc07d

  • SHA256

    da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c

  • SHA512

    02d52c413e24046c27a4a1c5d127c130cf2cdd029cd1721a3aa2b6b52e5c97bed0a2575a10ccb5d7570a46cc1969eb3aa96197dac3cc02ba3ce5b4adb4610d8d

  • SSDEEP

    1536:rxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZrvCBj:r1fbvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.118.193:1328

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections