General

  • Target

    deab3ce583f85b8e980de3c2d959f043cf3ea84314a42640a1a829f44b80422bN

  • Size

    72KB

  • MD5

    5a36c3fa2a724d50f1b3a89c1ebc6ab0

  • SHA1

    82ea81989218b0a6835a1bae96d77ef39ebe370e

  • SHA256

    deab3ce583f85b8e980de3c2d959f043cf3ea84314a42640a1a829f44b80422b

  • SHA512

    5c0dcea88d668035c0abfa543b99aa9d4280a1fa225c61e4a3dad127cfbb8da922d4296cf06539a4e100de443f5414efb1bf837de22cbb712e72004a1e682272

  • SSDEEP

    1536:IBFBHCqWtb8nODSKUw1MVrb7kMb+KR0Nc8QsJq39:WBHCqa8ODSKLyke0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.170:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • deab3ce583f85b8e980de3c2d959f043cf3ea84314a42640a1a829f44b80422bN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections