General

  • Target

    3696c1b279ff17a9d304975cef4cbe517a8c6f15c36739307098567b8c7cca1eN.exe

  • Size

    41KB

  • MD5

    1f83f222cc739000753007cf864d9fd0

  • SHA1

    8c08df9bbd3edf6af87776609d33f4e7eb866163

  • SHA256

    3696c1b279ff17a9d304975cef4cbe517a8c6f15c36739307098567b8c7cca1e

  • SHA512

    da55ecfb2735c6241e44dea14b12c1c255c2b5c60a9577bf1e4f6c7a3496cfa3bcde22f184eda6b3cc7bd958ec95a37c11acceff7fb5d01f1d56514fe9102991

  • SSDEEP

    768:6neEDEzX2e08PP3lLuzZPKqqCjMZ8pXR0K7M:6azb08PP3lLuBZqCGQXuK7M

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_bind_tcp

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3696c1b279ff17a9d304975cef4cbe517a8c6f15c36739307098567b8c7cca1eN.exe
    .exe windows:4 windows x86 arch:x86

    fe0fd8b092a49d5699b41243d1eb27ed


    Headers

    Imports

    Sections