General

  • Target

    213a76146f0459c0108da55dc4a533145a1fcad98c3d94fb70c81246a1bc9740.exe

  • Size

    72KB

  • MD5

    13ab1cb658c72b66c3a8bce31405ac1d

  • SHA1

    e44dbe441c724611e1f4c790794b2873cc7e6756

  • SHA256

    213a76146f0459c0108da55dc4a533145a1fcad98c3d94fb70c81246a1bc9740

  • SHA512

    fd8f300c00aecb7ee5aa63f5a82d00f83864101e850a018dfe700ee109430a3eaf0260de4c85236ee56729af96eda67fdfc8fee989bf91566ef70614f083ea74

  • SSDEEP

    1536:ID3lS1HhZ3ObFKkLCYe6t1Ryp5upDDdAMb+KR0Nc8QsJq39:S8hZEzLi0ZDdAe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.10:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 213a76146f0459c0108da55dc4a533145a1fcad98c3d94fb70c81246a1bc9740.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections