General

  • Target

    01c6347208e977e423f4893b311a53bc17bbb269b230d14cb0f96cc2a79ee046

  • Size

    72KB

  • MD5

    54633c0f3863d73f46ba139060097a64

  • SHA1

    3b7c0846f537b9db9cda535b7afcf71f5bd76198

  • SHA256

    01c6347208e977e423f4893b311a53bc17bbb269b230d14cb0f96cc2a79ee046

  • SHA512

    b27d6856fd639046cb414eb0513ab7cc7ae0be0fa98fa00a198e6a05d3e6278ab09c89528879317aff9ef62df3bd212e8f6597f7aabc85b11ab46fd1178c207a

  • SSDEEP

    1536:IUgSSd0Au5WiB6vlClZb1/5KFYMb+KR0Nc8QsJq39:vyxuFqIZbh5oYe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.61.208:4443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01c6347208e977e423f4893b311a53bc17bbb269b230d14cb0f96cc2a79ee046
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections