General

  • Target

    d7d1fdbc551a04815c8c7f8f14fe6d13063a8d31b58a825dce3976a995b4d29b

  • Size

    72KB

  • MD5

    a18d8c1767784f355e25d997f8b5934f

  • SHA1

    86eaa572c340736052e6293e37527581274597d2

  • SHA256

    d7d1fdbc551a04815c8c7f8f14fe6d13063a8d31b58a825dce3976a995b4d29b

  • SHA512

    3c2f01e213f7495f5d4fe3960f01261d4b2bcf22a9395d607241bb4bfa8c87ece124a6eda1f595672f4f38f12ff181712bd20205428b6b5e233c7e7d99d9f1b6

  • SSDEEP

    1536:Iad21FgjEG8SCHdhtMewgj0heTw53460tARRMb+KR0Nc8QsJq39:4FgX5C9htMe8v46re0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.219.129:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d7d1fdbc551a04815c8c7f8f14fe6d13063a8d31b58a825dce3976a995b4d29b
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections