General

  • Target

    8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085N

  • Size

    72KB

  • MD5

    81b6122eccea93ed2c9e7980621e7280

  • SHA1

    0a74dfb509b7ec3ce8bcff5f6535a7568906e378

  • SHA256

    8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085

  • SHA512

    9eea33b87bbd3829e913a3fa8468fa20f7b869ca6636209198e8effd30a4b6e12aece04f015522a207b2b8b4caed4adb98b9829d6d8f27f2e7a1982aad9666ae

  • SSDEEP

    1536:IU/RN3N7nsTU1+TBrc83rFo8hAlcL8tNk5/Mb+KR0Nc8QsJq39:XZN9DQk+ZcuhAGYti9e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.8.102:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e67c1ac42373681db73d1106d0fb4fdf3feb954f81f08bdde8f0bd8ba1bc085N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections