General

  • Target

    601a5cb179ec6b244dffc046f2f09c3374c699a21459de54abea2b8a2a5082c2N

  • Size

    72KB

  • MD5

    60ab2e602995cf5541e928e79c734270

  • SHA1

    b0fe4774e25bac8c1b1d0cd1b3e7c888ed03d1a3

  • SHA256

    601a5cb179ec6b244dffc046f2f09c3374c699a21459de54abea2b8a2a5082c2

  • SHA512

    982a46657c03a9b6d847cceab38c6b9ec3edd3427d270624016d41fb5ed005144322f32bb5d478520c9135056895c10837a0960a4e33727f54cd867f949024f9

  • SSDEEP

    1536:IWhin91btmQ6oYlri5Yy4c4DLH1Pg/y91DMDFZOMb+KR0Nc8QsJq39:T4pCl252zrv1wqe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.109:1419

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 601a5cb179ec6b244dffc046f2f09c3374c699a21459de54abea2b8a2a5082c2N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections