General

  • Target

    2f3788198e45b41eb092fc106393fe07762829be2bdd5244932a21dd6d40fb13N.exe

  • Size

    72KB

  • MD5

    2dde6234db544a7f54325ef5ce0f4230

  • SHA1

    35e0c8f06a0e1f65b93ceb2a622b4e72748b023b

  • SHA256

    2f3788198e45b41eb092fc106393fe07762829be2bdd5244932a21dd6d40fb13

  • SHA512

    c600785f5d63ff2714c4dd2340ef0791aeca316f153469f7ed3c4a88dbba8a49f5988081003fd58407eed4499372d462c82eb7537ecf9509d5622f895937f882

  • SSDEEP

    1536:IKBYrp5E0/+WZWCWdW98cxMb+KR0Nc8QsJq39:GjcWBQcxe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f3788198e45b41eb092fc106393fe07762829be2bdd5244932a21dd6d40fb13N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections