General

  • Target

    9b9209b425c010628887912d276cd91b20ba6a6f56ba9f3742e1209a9834c74a.exe

  • Size

    97KB

  • MD5

    e28bd0acfc73dcb50a05fe7f70cf83eb

  • SHA1

    15a792686bcf4713ad5c21ac4d9976fbcc47e881

  • SHA256

    9b9209b425c010628887912d276cd91b20ba6a6f56ba9f3742e1209a9834c74a

  • SHA512

    4c30b38d0f8d94a01225cdacee94b0bc797e77b3a85e57d5391c0b4faf37992b53965ead4de5e52480de11ddc9ef9205a795b1fa6f07240b2692d74d2c8b6dff

  • SSDEEP

    1536:BwOJ+QncfQeiNAkOJEBrLJePs1qgYs/mGjLmZXhTt:Bw9osJhTt

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.102:2345

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b9209b425c010628887912d276cd91b20ba6a6f56ba9f3742e1209a9834c74a.exe
    .exe windows:4 windows x86 arch:x86

    63367d0e1a30cb432e92c34d319cdda2


    Headers

    Imports

    Sections