General

  • Target

    e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701N.exe

  • Size

    72KB

  • MD5

    c54397cbb4a643e6255233207a5be720

  • SHA1

    acc6f19a9188308d6300e24475f0e8569fb0440d

  • SHA256

    e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701

  • SHA512

    e29df3179b8bc75d3e285f26ef01ed2e48ac45ff2f8b5e5a2f1d05229d198dcd0b324181b97c3085b6c205acbfff54f3252150acef216c371a2fccf654f3b485

  • SSDEEP

    1536:IxyNgZkepa8PXu+4pllMEgwms/nzxgjMb+KR0Nc8QsJq39:cyKZkep/54p3QjonOje0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e7c1abadfb8e9459482d67ce18a140a4c9260eed4a969efdf04d80432c9da701N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections