General

  • Target

    41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7.exe

  • Size

    101KB

  • MD5

    b043afcf12cae637031f638c7b7b1194

  • SHA1

    307ac57eb43562a337ab798c8b72a1c932c2a224

  • SHA256

    41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7

  • SHA512

    a077849bd0acf7bfa75088ba22294db2f7b613855deeada6c57b37ea8e9e1dbb60f3c0312ab4db74696a07062d9a9c5a10eb6f32ba5dfaef3ef5ec65a35c70cf

  • SSDEEP

    1536:t9nFwbSNmCij6z7l+KheSjaFbBNvKpUySy:jq6z7fheBNINSy

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41d75595cc2defeabca00134a9d9a83c8b036f9f11e2b9988c77bb43320ed6e7.exe
    .exe windows:4 windows x86 arch:x86

    3baf5198a5c82b57436352743d8c8225


    Headers

    Imports

    Sections