General

  • Target

    efea0d383996421acca7fec195e3f0a395455f39757355ab176a584e12ace4c7N.exe

  • Size

    72KB

  • MD5

    8e45394e2a30f9bc6e3456975e353410

  • SHA1

    c9b8daa268a58612aa477115b8870de6f4078f1d

  • SHA256

    efea0d383996421acca7fec195e3f0a395455f39757355ab176a584e12ace4c7

  • SHA512

    cefee610add0df8b62f3bffd7375747a496c5a57393e3aeb2c318739778bf7293778a097775e56b1675bf8be8b1d3bc8a3d3cb7ac01d6753d18fbe66049c4181

  • SSDEEP

    1536:Ih6az8o7/TInu8eidyrdBNqVDpwb1PQSrdMb+KR0Nc8QsJq39:M7/cnu8eicNq8b1IIde0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • efea0d383996421acca7fec195e3f0a395455f39757355ab176a584e12ace4c7N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections