General

  • Target

    f9a87dbf0ab20b53eeb4075218e2f5aec1c27df76f1c7a548eaa4c1be5852c2e.exe

  • Size

    72KB

  • MD5

    5011d47a57b29102c3f916a7635bf15f

  • SHA1

    c0e14897740f413a3a27e1fb8ec1b052b3f2d9f7

  • SHA256

    f9a87dbf0ab20b53eeb4075218e2f5aec1c27df76f1c7a548eaa4c1be5852c2e

  • SHA512

    f74616263c46ce5c1c75ea04d9c1842254b8050560089c540c5fd88b92c5346145c38be2616e171a20abbe4d449a49eeb1a55dcf3283eaaeb5607b78150efe46

  • SSDEEP

    1536:I2YauALs0WFzj4YPsVAu9cPiGObDuvthpvwp7sryJG6Mb+KR0Nc8QsJq3X:PYJAL5WFYYEVx7baDlw1Qyve0Nc8QsCX

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.163.147:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f9a87dbf0ab20b53eeb4075218e2f5aec1c27df76f1c7a548eaa4c1be5852c2e.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections