General

  • Target

    e1b03760c8c78f4f428ef6b8a40e472e2d6992fa60dd2783e9d1b63b70ebe1aeN.exe

  • Size

    72KB

  • MD5

    13a3fd0a7a191844e9d79ed4455059a0

  • SHA1

    79c1da98c876e7d7833adf9dd1855b4812d68cff

  • SHA256

    e1b03760c8c78f4f428ef6b8a40e472e2d6992fa60dd2783e9d1b63b70ebe1ae

  • SHA512

    9a55f317487cb7e096fb4bb1fbe9f006bf92a0966de5b0a1b3e9f6c93399dfac575848dbd6627b2d6fd259ee0ec1e955982fe9536396e0994b4d6771e58ab4ef

  • SSDEEP

    1536:IHjsbXjOYtWibyO5Youls8sKIeO5Mb+KR0Nc8QsJq39:IsbXqYgibyO5es8szeO5e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1b03760c8c78f4f428ef6b8a40e472e2d6992fa60dd2783e9d1b63b70ebe1aeN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections