General

  • Target

    b026f7d11c8b5a321217a808503e2b2a3c3e8f83ad71d9623a32cc2049cf9679N

  • Size

    72KB

  • MD5

    409e7f375f92a6bb261a3b4625806470

  • SHA1

    dc957783779861a8c25b8561b3d0553d24ffde62

  • SHA256

    b026f7d11c8b5a321217a808503e2b2a3c3e8f83ad71d9623a32cc2049cf9679

  • SHA512

    2ae70966dd3c9cd667c80de171b177bdb85b22399553807c76f7ead20c9772d4cffb9318e07510a8b7dbc34f67e53c42869a22511d004042bfcd8e37ebd86633

  • SSDEEP

    1536:IpQXfFOynx/6zcwhAEJQInkgtnT6saHdNGSzMb+KR0Nc8QsJq39:0QXdnxS31QInLTHa9oSze0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.64.132:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b026f7d11c8b5a321217a808503e2b2a3c3e8f83ad71d9623a32cc2049cf9679N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections