General

  • Target

    0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66N

  • Size

    72KB

  • MD5

    1c61d47541c207c0748c72ad0d353ed0

  • SHA1

    e6796a7610d296cd03657d5d76200be321ba4875

  • SHA256

    0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66

  • SHA512

    3133a6236a5a4e2eaee37c1b8ec1ad064bd39c41effe60a66b23e4af8750247bfa314b63ff044d598933df9c50572195d5bac071a0190a5f6f06d2e9d06c8f77

  • SSDEEP

    1536:IMjdw25W5PjOQx7aN7rZMb+KR0Nc8QsJq39:Dn5GPCw7cBe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b9bd92e66283089803f13f4374f6dcbda8256c4817dac475ada29a9361c5b66N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections