General

  • Target

    178b4d8435315321c5844e129e49209973cdbc94b3659c44fe05d047e7b7fe49N

  • Size

    72KB

  • MD5

    abfefb0be9c524c80f751aa921a75490

  • SHA1

    c5d3813d10c9ddf3a8c92e541d7ea4b3335337cd

  • SHA256

    178b4d8435315321c5844e129e49209973cdbc94b3659c44fe05d047e7b7fe49

  • SHA512

    bc1a523d6ab44fa1834755af31fa07ad6f69c3912dc0fd2d28fc976e9f5b0c15a895d10a2286b1861651fd1f703a73bb0996e4b5f3999ff3e4b69f1f58c6eb08

  • SSDEEP

    1536:IiPSUbwf/0sFeTb4Ly7SSLP/4vyMb+KR0Nc8QsJq39:PtA/3eTbcFEP/1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.36.128:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 178b4d8435315321c5844e129e49209973cdbc94b3659c44fe05d047e7b7fe49N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections