General

  • Target

    0123a8f341234125135b5263d03340733bb11745e4b2a8ec157c8a721e19401a.exe

  • Size

    72KB

  • MD5

    27508b884b751270bd451040dc78dd45

  • SHA1

    dddcc2020ca70572d1a9220203aec791f63e4aae

  • SHA256

    0123a8f341234125135b5263d03340733bb11745e4b2a8ec157c8a721e19401a

  • SHA512

    af73783889a91e9a30c298c6f8aeb9174e326898043c9449bef0b4c89fa0a541f17b547f80916db43adfcb03e1ac55037d813ff89967f58607bf8a69b6ba7c10

  • SSDEEP

    1536:IKvzhiRKF/7xs9G6KrSGAVdHjqm8Mb+KR0Nc8QsJq3v:LhFF7xs9Tj4m8e0Nc8QsCv

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.38:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0123a8f341234125135b5263d03340733bb11745e4b2a8ec157c8a721e19401a.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections