General

  • Target

    602bc75ebe17b97029d2b72bcb2600b4ebc90fe31675dbd8192ad233e7840772

  • Size

    124KB

  • MD5

    3cf3af1a2f49f007f94f4d5bfc10176a

  • SHA1

    9dadac72c6019b0e863952a658b5e405c46838b2

  • SHA256

    602bc75ebe17b97029d2b72bcb2600b4ebc90fe31675dbd8192ad233e7840772

  • SHA512

    f7043d169f3b06d3b3d64b41925c389b8c396cafe78c9e1fbcf6951cab953388f0686100df0bf70343492fdf444568b08d83d26f3ead7eae98dbd87f12a59f98

  • SSDEEP

    1536:IkOk+PJTkxu1ccBavZLyTmByZmu4ZMb+KR0Nc8QsJq3:bORTkQicDbIu4Ze0Nc8QsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

121.36.61.206:8001

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 602bc75ebe17b97029d2b72bcb2600b4ebc90fe31675dbd8192ad233e7840772
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections