General

  • Target

    396453c8dc8ce4800e4f5c450cb6fee630a06463a5917692f02a619a58e749a0N

  • Size

    72KB

  • MD5

    a1cc76f7dc7bb1bade16b264653862f0

  • SHA1

    3ddcdf71fe28d659df331eecf992626583de2cdc

  • SHA256

    396453c8dc8ce4800e4f5c450cb6fee630a06463a5917692f02a619a58e749a0

  • SHA512

    020e6a11a3515f71c2d2ed040d2bda970717d8be669d7e2a182ada97573bc354bd52661762479dd97175d6cd4e320d15dba30aa59cb154630cf668ec37f11b3f

  • SSDEEP

    1536:IilO4K+6fjwc27srVTXnfQQo4Rwrd6DltKaMb+KR0Nc8QsJq39:4ZVo7srVjf95ir0DFe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.122.215:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 396453c8dc8ce4800e4f5c450cb6fee630a06463a5917692f02a619a58e749a0N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections