General

  • Target

    b45270d9374680e6aaf7a8f8ced0cf0e0ac3c3395ef24178d7cc16e7713acca5

  • Size

    72KB

  • MD5

    e7afa579358be223ab2b1a3b8b68e0ef

  • SHA1

    d2258d893b0392add29863613c6cd4abcc07e1fc

  • SHA256

    b45270d9374680e6aaf7a8f8ced0cf0e0ac3c3395ef24178d7cc16e7713acca5

  • SHA512

    49eca2229cf025cd3b6a6fa5dec48c3f19a462d806c6a7c40ec5615d818e295cc6d9c1ae716c1cc1197573da6308b5aa00a4086c475f83ef946a8dd5591c7468

  • SSDEEP

    1536:IN5LpnDQ/DDVAf328oV3uokO48cCJUQwaXCrnfUjSNMb+KR0Nc8QsJq39:e51QDZB8oNuzQlCrnfUjSNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.100:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b45270d9374680e6aaf7a8f8ced0cf0e0ac3c3395ef24178d7cc16e7713acca5
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections