General

  • Target

    69140d82048a3bf94eb22ebf39389b35362f0179186bc3b1adeb46d0bdc0e29d

  • Size

    72KB

  • MD5

    094bd992740a70ab855ba24b9aefa711

  • SHA1

    bbfdb2d06c4b0bf1685f08790389f2e6736a0bff

  • SHA256

    69140d82048a3bf94eb22ebf39389b35362f0179186bc3b1adeb46d0bdc0e29d

  • SHA512

    fc081da341508f52d7d821f47e2a6c62222fc23c576c1fc853548e0dad7cfc15020ed6517410aba01d3d2d4300b0318fc2e895a97d19fc692b921495ce2fa404

  • SSDEEP

    1536:Isx7w1GbaMyR2n7T5x3zXCD0yeu6GkMb+KR0Nc8QsJq39:HhZ/7D3zSCu6Gke0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.103:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69140d82048a3bf94eb22ebf39389b35362f0179186bc3b1adeb46d0bdc0e29d
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections