General

  • Target

    b5d69a2fe04f624a7c1469b0cfc1833d9fae77e6f6fb4c3b9c95f16c0d789c6dN

  • Size

    72KB

  • MD5

    493c810d0c29ae471eca69dd53667380

  • SHA1

    e3fdfea637d1905c53e24f849df372818f502bae

  • SHA256

    b5d69a2fe04f624a7c1469b0cfc1833d9fae77e6f6fb4c3b9c95f16c0d789c6d

  • SHA512

    e2e2148ff5d265ff744398e62a9a9b9ffe6de2fc62d707523470cb686b380a158dd49b1005c7f6ed910fe81dfe390c1d7944af22ba648d9e8b3a240038e1dbd0

  • SSDEEP

    768:IeyLqc0nL47KE3vJsBVddCYZ2+qzFjXfVemRi9Ldkm5n8MkJ0PCHSckzCScx4qXx:Irs2fJs3hQxjaRyN0Mb+KR0Nc8QsJq39

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.213.251:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5d69a2fe04f624a7c1469b0cfc1833d9fae77e6f6fb4c3b9c95f16c0d789c6dN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections