General

  • Target

    6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9N

  • Size

    72KB

  • MD5

    c00d0b1cbecccd2d4ff4ec8b4f819cd0

  • SHA1

    42422dfa4b815d717df6c6ea3b7f19ad5696b9ae

  • SHA256

    6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9

  • SHA512

    c3744cf761b6380b533c5f0b08bc1ef31fb86675d639c66d2aa18046a31b66a092ef74a4262bc8a6bf350e8411bcaf96a296981dd7268023fb50527e970479c8

  • SSDEEP

    1536:IOe6D1ILofDg73vuStVo06JzPpRk6Mb+KR0Nc8QsJq39:C6D1OofI/u2CzBle0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.93.129:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c0c4149ccc65f6bb9628b4edb00744c5e30c1cdb0fa2e047a520106b76ddcb9N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections