General

  • Target

    f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093.exe

  • Size

    72KB

  • MD5

    dde420333180e6f1fb22ec0d7bb5ddba

  • SHA1

    5551b782b84abe2606fd2897cf6285bb3854844b

  • SHA256

    f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093

  • SHA512

    9e952f70ee58439cfdf93e00d3d81f3320bb602f8cd38643844c48568c3b2540dda807887967f0e074fb3310ff13ee74db979b9947b99e51a4263535d2373917

  • SSDEEP

    1536:IknH2GwF6HJpIg/OfCc7Thq4OLsZytZg6drl0rklTROMb+KR0Nc8QsJq3H:x2GwMpIg/O6c7Tc4OjJayke0Nc8QsCH

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.19:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f11040b48be73c99ef4e4431cbd56d3f45743e18f917d2129a9798cac185a093.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections