General

  • Target

    a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe

  • Size

    72KB

  • MD5

    1179ce43bb61087aa062a931413f768f

  • SHA1

    0326746d2321dd4f6af610022140323e0b9d8786

  • SHA256

    a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe

  • SHA512

    bc007bd6774a2eb63d02402be9102c62f18277c5bbf8e8d8bd3e74b7c6304727200d831f98d63a10bab743c4bdf1c9febc91910243906b792335a0ce723a3954

  • SSDEEP

    1536:IGYjC72V5oobSAHrlKf2irFA8IJswblMb+KR0Nc8QsJq39:ryCiwnOwjrFVI/e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4ae026d4203cb8b554f4fa540e77797a3d69aef690425ec6e6c8cb71d4eadbe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections