General

  • Target

    ec25b5fe7481a64d9d1f94ad2242e100500ae806ee4cacf6501e4a5af60091c4.exe

  • Size

    72KB

  • MD5

    e6a80db15f5ccfc6e026130f6b6027ef

  • SHA1

    5a24c3dd0559303517604c2fb28c6a7c360bfc11

  • SHA256

    ec25b5fe7481a64d9d1f94ad2242e100500ae806ee4cacf6501e4a5af60091c4

  • SHA512

    5edf26aff4f5d11429ddc1b7e62f435305794a0120bb6591e38de7cbcb7ace9eaa4b76c7065c5fcb179a3999433af31caf7d90b0dd241ef7affd17d3091bd5f5

  • SSDEEP

    1536:Id/ZuXkKxTlwk6rwZsOpKDfMb+KR0Nc8QsJq33:G/0UKxTIUZBp2fe0Nc8QsC3

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec25b5fe7481a64d9d1f94ad2242e100500ae806ee4cacf6501e4a5af60091c4.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections