General

  • Target

    32282cfa34ebd3aa220bb196c683a46e.bin

  • Size

    43KB

  • MD5

    6f31f03091345bbf5f7b340b1ccb729c

  • SHA1

    b236c86f73f8a2c7bda6acd3e0fe9c905e8bf5e7

  • SHA256

    0d566dcfee4d295f95cfc3832b995a129f963cf80dae2deecfa40cf026f35398

  • SHA512

    0903a99d4710b2ec76579bb44728407a70bb9a1b3b954d2a310401d49f56fc8806571ecff0f5d90a8408f2cc66ab67cacc921b396f5866a82dbf0c9aafb9213f

  • SSDEEP

    768:xJxW5EkQsINmetxIuEEJLcAmbUgAKz3+Y1Sc3Kz/VBeH4XZYJpSkW6jXD:xuMsILtYEJImKz3+cS2K/wPQkbD

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.204.90.65:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32282cfa34ebd3aa220bb196c683a46e.bin
    .zip

    Password: infected

  • 3c3ce0355bfa42b379830b93a76cffd32fceed54e6b549ae4a1132ca30b392ff.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections