General

  • Target

    c66dbd96a911431f7982840bbedd6a236d67fb0e775ae5180bbc3e55419d52d2N.exe

  • Size

    72KB

  • MD5

    a860aa6b6f454a2e32ddd23d97a1c280

  • SHA1

    17271e5186681c35845a339fd246b28cc30b3981

  • SHA256

    c66dbd96a911431f7982840bbedd6a236d67fb0e775ae5180bbc3e55419d52d2

  • SHA512

    62a66f7dcfedb9b1e7c0c412057f590f2b786c1d8be59fa82c044e96d53b8bd6ae33126956d79c67b08a5eae863b1e8b7ec9b87dbb68482df91533c3266d2446

  • SSDEEP

    1536:Iflva42EZYqiW0KmgRiSwjyI7Q/1ZYPbnDMb+KR0Nc8QsJq33:8vaHH2cSw9M/1ePbnDe0Nc8QsC3

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.5:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c66dbd96a911431f7982840bbedd6a236d67fb0e775ae5180bbc3e55419d52d2N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections