General

  • Target

    3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a

  • Size

    72KB

  • MD5

    7cd195f39d7d29ba0440bcd0243e8297

  • SHA1

    b97eb9c95217a21b95f892eb6ba8cc1f4b725ab3

  • SHA256

    3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a

  • SHA512

    6912b0ac18bb8a71da1c10e9bdb70ba0d0be01f8075bc40a4cd02bfccf428037d4ded486e02103b79d04f524d7eb657069b25862da21d11fa73f8d8c72e669a9

  • SSDEEP

    1536:IJyxwkKAcavqYvDDoyxTKM1Mb+KR0Nc8QsJq39:/wA3QYe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.75.149:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b4791d55eb9f24ee04d1ba4ebf2fccc6cee36bd2ab6f4f94df933364f582f2a
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections