General

  • Target

    3f9a1d1b57f3f0ef1c3af096b31a35f6e6134104f096b0b38c4821b0a7943b4d

  • Size

    97KB

  • MD5

    fcb23351a65e3e0a6d546bfd63796043

  • SHA1

    ae799da5646fde24afc4de38a3f32174c422755d

  • SHA256

    3f9a1d1b57f3f0ef1c3af096b31a35f6e6134104f096b0b38c4821b0a7943b4d

  • SHA512

    08cf4de12266f557f5d1e28046f5082c58365715453f8fd25ddebe27fa50025ed8b5377f27f6b58a77b39471972c62eeae2f26766132fe81df3a94f88c514a2b

  • SSDEEP

    1536:9xBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZSvCBj:91fCvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.89.130:2106

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f9a1d1b57f3f0ef1c3af096b31a35f6e6134104f096b0b38c4821b0a7943b4d
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections