General

  • Target

    abc.exe

  • Size

    72KB

  • MD5

    37fa8c1482b10ddd35ecf5ebe8cb570e

  • SHA1

    7d1d9a99ecc4e834249f2b0774f1a96605b01e50

  • SHA256

    4d2eaca742a1d43705097414144921ae269413efa6a2d978e0dbf8a626da919c

  • SHA512

    a7b7341c4a6c332aef1ffb59d9b6c5e56ec7d6c1cb0eff106c8e03896de3b3729c724a6c64b5bf85af8272bd6cf20d000b7a5433a2871403dd95cca5d96ebd36

  • SSDEEP

    1536:IVbwdLjSUfCOjavEG0t6Se4juSbSDwgPCIMb+KR0Nc8QsJq39:okaO8T0t6SesS3PCIe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

103.42.55.251:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abc.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections