General

  • Target

    013d4ceb91a73cb442d06b6cbf6d25a8aab784027213ec0465ce64326adecb7eN

  • Size

    72KB

  • MD5

    a353729567b97e11b381fd6fd8205240

  • SHA1

    24b8469eef48b9604eabaf3538b282907a738ea4

  • SHA256

    013d4ceb91a73cb442d06b6cbf6d25a8aab784027213ec0465ce64326adecb7e

  • SHA512

    d1f4cb902cf318d0d5e90d101188692017dba540cf19f1c1e7dca03d3542134c1bbe58fe41b67c437518818bedc058651e1f8672a02d4c0f6ef6491feb2592eb

  • SSDEEP

    1536:Il3tyzpkE4Fuf60warxMb+KR0Nc8QsJq39:udyyE4If5rrxe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.105:1409

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 013d4ceb91a73cb442d06b6cbf6d25a8aab784027213ec0465ce64326adecb7eN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections