General

  • Target

    32397e30493cede1b8ef8c9480d7f48edc8938251ca744b45efc919d201aa51b

  • Size

    97KB

  • MD5

    6694d2a3143998e7ca8211da1df45f39

  • SHA1

    9d2fd8faf110ed97bafd7fd9f11b726c916bd8be

  • SHA256

    32397e30493cede1b8ef8c9480d7f48edc8938251ca744b45efc919d201aa51b

  • SHA512

    7e825d98ec1155ecddd93922d7fec400cf03c4fc9cb0e65b9d503feec8b201b0cf07a5e5da36124e5c72c08892140afc2fef1228eed814fef081b8ed524a7764

  • SSDEEP

    1536:2FBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZTvCBj:2pfDvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.47.141:2404

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32397e30493cede1b8ef8c9480d7f48edc8938251ca744b45efc919d201aa51b
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections