General

  • Target

    3dbf8cf664f57219d461922cdb0dc6ebb8f3b7e983475d9c9c00e7a699c848a4N

  • Size

    72KB

  • MD5

    e1611ee1017a035d14ca39589399dc00

  • SHA1

    c928c977caee614e3f57c20e3836301ffe906d77

  • SHA256

    3dbf8cf664f57219d461922cdb0dc6ebb8f3b7e983475d9c9c00e7a699c848a4

  • SHA512

    1af9223733d0c33ff9db7863cb1f3eefd74145c88f56b28051c25e20d9c13a86ef108dbd78143045e4a968c10ba2b8a6633418dc5270334f15a491297a5bcd62

  • SSDEEP

    1536:IjMkTFJitsHYweNL2PCaa/nHDIHQfQTMb+KR0Nc8QsJq39:qsnwM1nHzQTe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dbf8cf664f57219d461922cdb0dc6ebb8f3b7e983475d9c9c00e7a699c848a4N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections