General

  • Target

    58d791832e9f0ca2c4994de4d754e4fb08ec118f6255088e922a134e5c2c7df4N.exe

  • Size

    72KB

  • MD5

    09d110f760f58195f5c55ee162bea130

  • SHA1

    85233faece084c1c6d5c684f0728ec7a68f29f69

  • SHA256

    58d791832e9f0ca2c4994de4d754e4fb08ec118f6255088e922a134e5c2c7df4

  • SHA512

    b9796a1ccf05cf9de58537728e6568adb63a896b160b713a35e792d05e37e7dd0e5843258f2dec9bcfa4b0959673905868fee7ee17723c09f7bba2f3f1b185e2

  • SSDEEP

    1536:IedvZdUo+55cGreIusVJEemtMb+KR0Nc8QsJq39:VlH4zcLIuuJELe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.3.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58d791832e9f0ca2c4994de4d754e4fb08ec118f6255088e922a134e5c2c7df4N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections