General

  • Target

    44c766b5952b8114283b04c0ccdf1688c15c3ca043ebe6d1986c04eeb74f0d9a

  • Size

    1.1MB

  • MD5

    a317ee6527114e1c93867c79857acf16

  • SHA1

    03b52fcacfbb0418322626a411458a092d041014

  • SHA256

    44c766b5952b8114283b04c0ccdf1688c15c3ca043ebe6d1986c04eeb74f0d9a

  • SHA512

    966483b7419d1fe0fcf3555f179e9701d20f31e871c637cc28f3b851342c3431c1b0f9b4d0e3189a96d768425f0fece8057efd4f4ddd41499c34810c675e22e9

  • SSDEEP

    12288:+67E9D/DCk8r2annVwgUqLA8odrIpKpGg5cqcxP+kmcg5xrqkY:y9D/D8XlUqLAXdrIpKpb5cfPBJg5tY

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.111.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44c766b5952b8114283b04c0ccdf1688c15c3ca043ebe6d1986c04eeb74f0d9a
    .exe windows:4 windows x64 arch:x64

    3856e6eb1020e4f12c9b8f75c966a09c


    Headers

    Imports

    Sections