General

  • Target

    d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039

  • Size

    72KB

  • MD5

    81bb9aa35aa33104906b16cf4a794fe7

  • SHA1

    7a2a2fbe0f7db7b13641066a51500df500aabc57

  • SHA256

    d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039

  • SHA512

    c122bf12d03f2d62c2de481390c0d5136c7c0884eaadb42b0af9a093f29751adf8aeff395d04d1d3c8b2a0e4a5b4a7373ade60a37f45692410b8b083972d4404

  • SSDEEP

    1536:InlyMSzvEK0Ujb9iQg7sPefMb+KR0Nc8QsJq39:mlWzv+fsce0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.2.128:1337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d932d51df6a93d0db3fab1d8484ae6d9eee800ec692f780b5c807c76dd2f1039
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections