General

  • Target

    9430e6b4461366a609dfdd2c823c85992c67016f58b5168473fd7cd2983b5172.exe

  • Size

    72KB

  • MD5

    5f9765906ce07e207adf0193e39f8d24

  • SHA1

    0fdcf68ba816e0cd6cd85165e8647f7b960a6d31

  • SHA256

    9430e6b4461366a609dfdd2c823c85992c67016f58b5168473fd7cd2983b5172

  • SHA512

    26c7ae99c2ae4a7505d2dd76740313d5c81ba1abf4e6b13a5b4cfd3d3e02108401e71d8cba194ab275c5216342a351d8167714d6d4aaa0231ec69be0a040741c

  • SSDEEP

    1536:IYIlQfzWx2/iWw5AepcWDldQVPK/YaQ4mhQNMb+KR0Nc8QsJq31:pW0lw5AYjD7QVPK/YaQJhQNe0Nc8QsC1

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9430e6b4461366a609dfdd2c823c85992c67016f58b5168473fd7cd2983b5172.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections