General

  • Target

    9cf3fc2cae0c1f083321ad11576a83d4209a2db0a525763eeeb223c369e7da1bN

  • Size

    15KB

  • MD5

    267a96061366dac5774e2b7498e0dab0

  • SHA1

    866ad1ae0411b0e580597853e6197bf8a7f148b4

  • SHA256

    9cf3fc2cae0c1f083321ad11576a83d4209a2db0a525763eeeb223c369e7da1b

  • SHA512

    ab887fdd5ab2005979b13221551bd07ae671b9c9273be8dbb013a3b2530ad6535e989ddd81ac0aa2923765d49ece1d32a1958f8d87b6094239f25e24a700715e

  • SSDEEP

    96:nnYBxbTmBBjkcfrAlhNHc2BywoAJPQYi3K1DntAfdomPdHWsyzUpQw7b:n+bTQBk4Alh9pBpbtQYQK5YouI1Ub7b

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.0.129.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9cf3fc2cae0c1f083321ad11576a83d4209a2db0a525763eeeb223c369e7da1bN
    .exe windows:4 windows x86 arch:x86

    b093b9b6223af7f9e72d34d8765aa77f


    Headers

    Imports

    Sections