General

  • Target

    bda4c64126014cfc37b352997d299cfdb3d5ef921b7630e5f3ad15639e280950N

  • Size

    72KB

  • MD5

    8190af0239e8d91e92266e649ee0efd0

  • SHA1

    8a8223189165d4a05cddb26435e62f30cec44b3d

  • SHA256

    bda4c64126014cfc37b352997d299cfdb3d5ef921b7630e5f3ad15639e280950

  • SHA512

    5788d2421a73b99eee81124935743d0b57854385d4ed2d91089d9c8223439bb42508c9c8762c926263e140fa2dc1cdef395575b9def67d6285294e282bb50815

  • SSDEEP

    1536:IzWXW9W5ILQnk9/ln6ftx3sEUTHMMb+KR0Nc8QsJq39:vXW9WuL39F6ft+EmHMe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.12.59:5000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bda4c64126014cfc37b352997d299cfdb3d5ef921b7630e5f3ad15639e280950N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections