General

  • Target

    02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea.exe

  • Size

    72KB

  • MD5

    45a79ff8cc4c4fc40a59f6378f526c37

  • SHA1

    3e4aa9d89d28620605162bf8bcbcb56fef2b8634

  • SHA256

    02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea

  • SHA512

    ab22bc973ce4fbf5da87274222e69c739ac8c7a33c7d28ac50f8df79920b44675163c88a35aec23f92996c83dd7884431a4ecd57189f8be47fd4a17ad0051d0a

  • SSDEEP

    1536:IhrgrKYxbz2nqDENhL/skQDD+Mb+KR0Nc8QsJq33:cgr3UqOhk+e0Nc8QsC3

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.21.134:5000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02d800c75fcf94590a6a94396a9f3ba385afbee375fa13f84d8518c2e99a9aea.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections