General

  • Target

    807c2dfd9d98a7e53e7d06e50ca2d2552ffe606514b51d20e8c672beccd6392bN

  • Size

    72KB

  • MD5

    b2a997388e19cc26104f5a2ef64de300

  • SHA1

    ac999867301ab599eec053e165bc0677905c13f4

  • SHA256

    807c2dfd9d98a7e53e7d06e50ca2d2552ffe606514b51d20e8c672beccd6392b

  • SHA512

    50b9e92929b942fa6f5322cdf16cb118698c5b7303059df43368a08ac7792828f94daf587a26fbeda7ef3c148793fc5cd510c1d036e8fde36452919afe23c9c5

  • SSDEEP

    1536:IBnoxJNt3FkD2N3OFsyg8nX2VpCcLbttGMb+KR0Nc8QsJq39:2YfnkiN3dQnX2VplLxtGe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.100:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 807c2dfd9d98a7e53e7d06e50ca2d2552ffe606514b51d20e8c672beccd6392bN
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections