General

  • Target

    a374818e63dbaf029ac17dccb4d95b4eaa19e82dacfea393fd5486bc1af71c96N.exe

  • Size

    72KB

  • MD5

    942f08850b701317f07f5f8134fc3cd0

  • SHA1

    690047c9a2ea5c2b4282864c6d42ffde0058f98e

  • SHA256

    a374818e63dbaf029ac17dccb4d95b4eaa19e82dacfea393fd5486bc1af71c96

  • SHA512

    f3c6b975a33c5c1fa87f459683c0690304e9112a556af2cafe71727710a32eed4810473b0da9996a1108e466326af4e210d3e58f17f203ce1f90fcff657eba63

  • SSDEEP

    1536:IWUMAgXxEZcxU0bH6gH56KgebCVMb+KR0Nc8QsJq39:rFrwATHrKHe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.249:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a374818e63dbaf029ac17dccb4d95b4eaa19e82dacfea393fd5486bc1af71c96N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections