General

  • Target

    Macro2.exe

  • Size

    72KB

  • MD5

    e0dbf63fbaba9fd87d48a9a0f1147c18

  • SHA1

    28fc4efb669a4198234b55e0cfb6bdd39b500692

  • SHA256

    7f03382b370fbe1864dd6a4e488c0c35366aa83542916cce18fa7785b454025c

  • SHA512

    3a4f86ac97c06b0bc420552f42537c6451fbb4137c3e6cb2589551d72733b2021ee491a041ed77c01e2dcc95ec70090732fcea6b952f26323cef85d9d157300e

  • SSDEEP

    1536:IAE3xD16yjL6l0Z10tEkuiKj8e64PR1aeQXrMb+KR0Nc8QsJq39:zE3B0yjLZZ10tUoxeQXre0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

89.197.154.116:7810

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Macro2.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections