General

  • Target

    4cf1dc95a03a0e4fa52aa9651b03929875d301ffd10eaf2bf1aa1c288377b2d4

  • Size

    97KB

  • MD5

    9bbf0b21ee1d4384188d41bdc402ae81

  • SHA1

    77b9b7eadb57a6320e412f5c8fc89f4d5a461a40

  • SHA256

    4cf1dc95a03a0e4fa52aa9651b03929875d301ffd10eaf2bf1aa1c288377b2d4

  • SHA512

    30296c6913b52f8678d9c94080f92097fc65d427b386f05f20e41ded4f7429fbc0f8802cee2c74769dbf3c5465df3cc6773a04b626792554301719886d7cb6c9

  • SSDEEP

    1536:CxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZ7vCBj:C1frvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.3.175:2303

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cf1dc95a03a0e4fa52aa9651b03929875d301ffd10eaf2bf1aa1c288377b2d4
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections