General

  • Target

    9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d.exe

  • Size

    72KB

  • MD5

    d5e72faa60ef45ef96f65ea2a51ca1d4

  • SHA1

    cb0c8636cbc5dff662af4c414182428268400bd2

  • SHA256

    9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d

  • SHA512

    5a4543796389a729525640827ca69113c38f3a6e24a2f0d5964db4207fe96724a74d9742b4ad82dd177577c6818df1b1d4b4b7f2970168e3fb459bfcc270e2a6

  • SSDEEP

    1536:I/n0UiyOOgdRGoJyarVils00Mb+KR0Nc8QsJq3f:2V0OgpyxqNe0Nc8QsCf

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.1:22

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9962754c29cadfae66392179c4cfe92686a8e71f6f1095d75a2a4d3962bfd95d.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections