General

  • Target

    62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035N

  • Size

    72KB

  • MD5

    2f7bb7a2cbff596c3af6b1670154fe80

  • SHA1

    48e1973326af8334774bd9e36aec2a9d72eb9abe

  • SHA256

    62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035

  • SHA512

    dd7c54602e2791572f7d90848e1c2c7db892ab17d406962e6fde9c622a58fa234ed2f2fd561c504e0d016787890f9ac512ec49f69d18b1f096da4c8faef0bd81

  • SSDEEP

    1536:I+Zig03pD5+dIWHCUy/YB94X/vToMb+KR0Nc8QsJq39:nQr+dIeKgX4PvToe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.0.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 62951c2f890c66d7dd793ca257d4c9937a3184eb45788c77574586caed679035N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections