General

  • Target

    9c86239e0cf8c3e25c8b441f76349a2e3bcd4486bb541104cb6a3665011d3544N.exe

  • Size

    72KB

  • MD5

    d368f39aa5cf1415d9f948edc49c9510

  • SHA1

    c03a9021ce38d4ce1d548411501364f91854ae6d

  • SHA256

    9c86239e0cf8c3e25c8b441f76349a2e3bcd4486bb541104cb6a3665011d3544

  • SHA512

    2f3f51f3f6f614408979a750269c002cf7d6d58c91c0b0fd6ce66c5e34d274a5d39bc222379728130fee1ebd269fde7269434b21da0f0fb602c9c49cbf91c1bc

  • SSDEEP

    1536:IMfUT9kS+SIWmxhfCf0CF+2BKY6Tw7CMb+KR0Nc8QsJq39:HfkVdx0q1cmKECe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.2:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c86239e0cf8c3e25c8b441f76349a2e3bcd4486bb541104cb6a3665011d3544N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections