General

  • Target

    0dc7c3abfc87fc4c88fee64a8dde58183777c9cbfa06070ba377584f14eb8cc6.exe

  • Size

    72KB

  • MD5

    504c4ba48d0cc73eded6a64138b0f6db

  • SHA1

    629c0b1d0ce63a4a7f24c854367f80269a1e735f

  • SHA256

    0dc7c3abfc87fc4c88fee64a8dde58183777c9cbfa06070ba377584f14eb8cc6

  • SHA512

    53adf155f804e7e9514324d8ddff50a24a609f092d77e835e8615d4330eaf116fd3e7c50942a9ec871717c03c7427eab1952dbe25ca581c6641b5f37725a92dc

  • SSDEEP

    1536:ICWy4Q9qFidWZCd+WaD5zpaCl9AOHxMZdMb+KR0Nc8QsJq3N:h9qAdWZCdaDlxl9AORSde0Nc8QsCN

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dc7c3abfc87fc4c88fee64a8dde58183777c9cbfa06070ba377584f14eb8cc6.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections