General

  • Target

    b944d22e70e7f1572274b7f69267ff815f01724b879f0f3b2d9c2041194045a1

  • Size

    72KB

  • MD5

    2e46ee5a12edbfc515f9a2cfaa296601

  • SHA1

    7b81f39ef3cf1486b58558e3c695342232368c11

  • SHA256

    b944d22e70e7f1572274b7f69267ff815f01724b879f0f3b2d9c2041194045a1

  • SHA512

    7a13aa105c21c12028bfe1d4cc57000aea612718782b9688d0850de6ecd8993645a16736f1d7741b157a352ecf5e785ef95c82b44cc275f1b251bd1924c0bf20

  • SSDEEP

    1536:IWgpwLqqECxxBIT/gzrJOw91jAtMb+KR0Nc8QsJq39:jSGqqE4gKlj91jAte0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.77.3.149:5000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b944d22e70e7f1572274b7f69267ff815f01724b879f0f3b2d9c2041194045a1
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections