General

  • Target

    722c47b18b8ba0335ed7df724dd8d30c053afd230d6fb0e52779c1cfa4f5f6a0N.exe

  • Size

    72KB

  • MD5

    c5a418c94b12e8e685063191de84ca00

  • SHA1

    f8d2b39455c3f1bcc911c23d5d27ecb9a7d66dee

  • SHA256

    722c47b18b8ba0335ed7df724dd8d30c053afd230d6fb0e52779c1cfa4f5f6a0

  • SHA512

    fba69280f46e68f50664f576f15921a7401ea26d57be139f5e30e77603be280878836f83694be400a7481a42c9add24043542670c0a6bd8d24bca4cfd571b845

  • SSDEEP

    1536:IMgvU8N0HvT9o46puMf0mrAVGNV/LHMMb+KR0Nc8QsJq39:VgzGHb9sxsQMe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 722c47b18b8ba0335ed7df724dd8d30c053afd230d6fb0e52779c1cfa4f5f6a0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections