General

  • Target

    621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66dN.exe

  • Size

    72KB

  • MD5

    88c1e686be387971eb1125143cde4550

  • SHA1

    3ba4efc89766f16fb5bc0fd8f81d518e94050d34

  • SHA256

    621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66d

  • SHA512

    9bb25c554155232bbe971a5e98a2836bd04822581ea2302a9f7afb9b6e603acbc23470fc140d85e47bfb45e45adb1343c6410143b17b0951111e291f9091f7e6

  • SSDEEP

    1536:Id/ZuXkKxTlwk6rwZsOpKDfMb+KR0Nc8QsJq39:G/0UKxTIUZBp2fe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 621351f5312bf1ce44a38f827cc425bd0b16fd567688b98f416e894a40ddc66dN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections