General

  • Target

    e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55

  • Size

    72KB

  • MD5

    0ea7612673462ec14d19e2fc634b9577

  • SHA1

    104ddf8af8008be91b346bbb7bda36ec892bfb14

  • SHA256

    e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55

  • SHA512

    b4a9b1da38152b22320c29f168710714de0e6c75b0d95418bd1de07966f677ac60f9ba7a1931a7b4f49df20ab1e407b4bc5d7de0b377ab7718c5753a8889f4f2

  • SSDEEP

    1536:IgEVCmnFrNt9O3GGbSjQW58b6g1Mb+KR0Nc8QsJq39:A3nFFO3GASz58be0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.44:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9db4cc2ee2cc30ce031741b3904982a6ccb5c6304c3c19fea08930d2eabed55
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections