General

  • Target

    7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65N.exe

  • Size

    72KB

  • MD5

    8d3f50a5f205d792ec4ee3561b8f0300

  • SHA1

    649f0a4648d0f8404b6194102f7e479fce6b1a50

  • SHA256

    7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65

  • SHA512

    173c9c915c498460c0c6f52a2bda4de31b30cd4fe7a1eb79c658dd66880b94d4f03023f038258d8a591f993c0f4b6f780de35014f9dc0a0c01570b92637f7617

  • SSDEEP

    1536:IiZjXfvK14CFpvv8ArboCL+zX5Mb+KR0Nc8QsJq39:1ZLfv58vpo75e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7740dca1d62f99ab418d4323dd62f45613ba0b1444992fad2951fd18dbb37d65N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections