General

  • Target

    16372712fd8136a84d1871353218691663bd045d2a21f5ec651ff4857f624bffN.exe

  • Size

    72KB

  • MD5

    7282999d0a64fdae272f7241677e83a7

  • SHA1

    a9769dc0d2b05142e36116eaa74ccd816cec0bc6

  • SHA256

    726fcb786e287a298ac288d6a77e9bd9c30d6213dd600b6202f78ebdd0b5a1b7

  • SHA512

    1740b89c451a38821d3bc12a09c79dd9261f2d21c4f376e5c6d149ca8c947f69ccfb57a7f5136809c18540f6dbf84bf802ae99eac57c8fe1121d61ac5090f0ff

  • SSDEEP

    1536:I4iphO9mjU0jt5ay/dFwA2tsMb+KR0Nc8QsJq3S:wY8H/ayd2qe0Nc8QsCS

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.203.255.255:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16372712fd8136a84d1871353218691663bd045d2a21f5ec651ff4857f624bffN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections