General

  • Target

    c5a252c47270ebaf21f9756e9219db67fa7f71c94544095c67f3e0a70b5dc6adN

  • Size

    853KB

  • MD5

    2778d9b306b88b1017cbdafc012b5f20

  • SHA1

    a29fae7a2c5d938fe511c78c944cf60a51a3a115

  • SHA256

    c5a252c47270ebaf21f9756e9219db67fa7f71c94544095c67f3e0a70b5dc6ad

  • SHA512

    05b836eb24338e845db810b4f30b8714add8f57c6a074a240ae29f69b181edd67a4945af6b01d652092656ea4b6266bab2a1179cf867364067d24828c2e3bad5

  • SSDEEP

    12288:V96DnWMiizuuD8j2iMukMqVYNQc9/5cp8RPm:MnWXMukMqVYuc9x8

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.51.59:4433

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5a252c47270ebaf21f9756e9219db67fa7f71c94544095c67f3e0a70b5dc6adN
    .exe windows:6 windows x86 arch:x86

    03bec99cf071d6c369b0097f1dc4c4e5


    Headers

    Imports

    Sections