General

  • Target

    9cb1185e8ac6931231cbbe26116e047a3e4384cd731f4d2122909f510dfaeefdN.exe

  • Size

    72KB

  • MD5

    fab4838ac11d454f60a0c2ef580b6110

  • SHA1

    e0196531663dc5cea8c112490392b02bc5be6a3d

  • SHA256

    9cb1185e8ac6931231cbbe26116e047a3e4384cd731f4d2122909f510dfaeefd

  • SHA512

    d33b5b883986048da1061393516cb5beeaadf2996e76e30a317018e0bb150615e0daee65ae9fe2abcb47d0dbfa91133e32b5c190bfcd795c49d99b23baa8552c

  • SSDEEP

    1536:ICWy4Q9qFidWZCd+WaD5zpaCl9AOHxMZdMb+KR0Nc8QsJq39:h9qAdWZCdaDlxl9AORSde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9cb1185e8ac6931231cbbe26116e047a3e4384cd731f4d2122909f510dfaeefdN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections