General

  • Target

    9b0610be131adf20dae436be62b8a4be5e1ed23ec56813e837875fdf53c4f4fdN.exe

  • Size

    72KB

  • MD5

    c491553aec7710ec28ec7702fa45b8e0

  • SHA1

    8167f2c3ed6f4b3aa8add3609ed9655ba452ef0c

  • SHA256

    9b0610be131adf20dae436be62b8a4be5e1ed23ec56813e837875fdf53c4f4fd

  • SHA512

    0de149610819194a1fe4ccb4f06cc2fcd83772169fbdc2d956f251ec59caf5b38242b3ec8f0163cd8b4d1db24c387cd3790dfb43e9f4311fd27ae603d5bea641

  • SSDEEP

    1536:I5KLmkgCZnNxf/ZIX7gX9QvVLlcyMb+KR0Nc8QsJq39:UKikXxfBKgX9QVpcye0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.167.2.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b0610be131adf20dae436be62b8a4be5e1ed23ec56813e837875fdf53c4f4fdN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections