General

  • Target

    6cd403db4eef230d3a1424eaedd81fc29dd6c64fa1a6b1eecbd8743db3c46e09N.exe

  • Size

    72KB

  • MD5

    226430d943c090b819ab8620c643ce00

  • SHA1

    cdf75d80b7ad943119616e91bc3f3578846caaad

  • SHA256

    6cd403db4eef230d3a1424eaedd81fc29dd6c64fa1a6b1eecbd8743db3c46e09

  • SHA512

    02997ffc9a589a739f7aa0d9dded0f8ecda921a18a4f1866a9a24b2ee4814fb6a9b0c5fc1601013716b9143d44faf16f1e6388e7b41c4d526f3c448438e98992

  • SSDEEP

    1536:IYIlQfzWx2/iWw5AepcWDldQVPK/YaQ4mhQNMb+KR0Nc8QsJq39:pW0lw5AYjD7QVPK/YaQJhQNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.1.13:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6cd403db4eef230d3a1424eaedd81fc29dd6c64fa1a6b1eecbd8743db3c46e09N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections