General

  • Target

    ss.exe

  • Size

    72KB

  • MD5

    61584ce40b3b4c6f5b9ac4fb4f8f0ec9

  • SHA1

    e1ae0b513f73c77309a8b29d91c5a3b6f9d5173c

  • SHA256

    ea0a6a37969c93adf76a55f9833d9d1ab2a0017705cc22fd66bd6c6277c84070

  • SHA512

    2c203be3ace0acdccf5c203bb79050388f991b60f6ec4df96fedd3a603eac6ffec26f237c47655a4c90e4b3efa2c4092a747e3890e2ea0df3c28a6e59b779b86

  • SSDEEP

    1536:IaSDzXDThy63ci87wFKOe6xbmq8iegq1Mb+KR0Nc8QsJq39:PSDHThyQc7QKoblggQe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.124.148.215:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ss.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections