General

  • Target

    261241aa8281322f6fecd0f4960a6805e242d6e37542d0788a71abc9cab38f1d.exe

  • Size

    72KB

  • MD5

    f3318b5cda2b67dd06aede91549bafb3

  • SHA1

    86eb13070850a29309d08517fa50bbdaa4dcfcae

  • SHA256

    261241aa8281322f6fecd0f4960a6805e242d6e37542d0788a71abc9cab38f1d

  • SHA512

    8f14bfedf36ca8d5e0c1b2997efeabf30fa3aa5e61865f66516b7e5f1d5ee570e05f2366147b4e69f73303c582eee9c5c46ada8623838e68af92bad03c84c7d2

  • SSDEEP

    1536:I5KLmkgCZnNxf/ZIX7gX9QvVLlcyMb+KR0Nc8QsJq3P:UKikXxfBKgX9QVpcye0Nc8QsCP

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.167.2.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 261241aa8281322f6fecd0f4960a6805e242d6e37542d0788a71abc9cab38f1d.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections