General

  • Target

    6a75b2bbc71ad015b5b0802d506b6b057c1bf707d77f7d9d77cc78a0927eb12dN.exe

  • Size

    72KB

  • MD5

    d72f83cb1f19d582d47841157f0a5120

  • SHA1

    fb14f20e5dfaf14010836b60c4c90e4437a2e7a1

  • SHA256

    6a75b2bbc71ad015b5b0802d506b6b057c1bf707d77f7d9d77cc78a0927eb12d

  • SHA512

    a3d4b66a16b5ea687e2fd927688fdcf062382ba14b5ae3f3e01df8e83fdebf1630eb6d31c1b3f5a17e9ccb09f65008cb513ece0dfedc80d2b60bd3bd24108af3

  • SSDEEP

    1536:IC2PLfnrmZRgBVwuA5GB36CHTo9aVcIMxMb+KR0Nc8QsJq39:R2Pb6fgBOuA5GBKC09xhxe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a75b2bbc71ad015b5b0802d506b6b057c1bf707d77f7d9d77cc78a0927eb12dN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections