General

  • Target

    e2abe0fe6ada169cd8cce7df8e8964b1f6ba9dae1ad5a1447f476bf5323c3fa2N.exe

  • Size

    72KB

  • MD5

    b142416cc5e35c52c8f35ab5dbbd1b50

  • SHA1

    6a5e42f8d7182da528143467663df4631bcd7844

  • SHA256

    e2abe0fe6ada169cd8cce7df8e8964b1f6ba9dae1ad5a1447f476bf5323c3fa2

  • SHA512

    70f948aaedbff8fc649cc28c1dafd83e0268d13c9594209703bf24db11d1d43ce4f36c2298b4b90cd60dcc7822c900d530660e374dfaf4e43eddfaeee4fe0faf

  • SSDEEP

    1536:IvqQnbdlwO5UTopN1htO9NwDRGMb+KR0Nc8QsJq39:7QbIEhtjGe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.16:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e2abe0fe6ada169cd8cce7df8e8964b1f6ba9dae1ad5a1447f476bf5323c3fa2N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections