General

  • Target

    800bfaee22d8dd780930ba100297c795ff1c9e94ef0aae240bdc2599e9b4bb11.exe

  • Size

    72KB

  • MD5

    05c05f49925afc42e4d5154b3fb051d4

  • SHA1

    5f2357e8fd599fffa95a721b29a161f7f3ffdc40

  • SHA256

    800bfaee22d8dd780930ba100297c795ff1c9e94ef0aae240bdc2599e9b4bb11

  • SHA512

    daddff2a67446e7f2c382b13f7dd2baec59e1eeeef639a98b1256cc06f26868f7d361498791e2a47ff721773881cb66518d40e2c9296a0290827d2a1668f5364

  • SSDEEP

    1536:IR9swu8t6fBr85jzsxXWwtnDfgFdQKMb+KR0Nc8QsJq3/:09swB6Z45jzsAyLo/e0Nc8QsC/

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 800bfaee22d8dd780930ba100297c795ff1c9e94ef0aae240bdc2599e9b4bb11.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections