General

  • Target

    bc3bd98388d47321bce7e3dbf84a2cbc06e81a9c3c73c98392d1d22e5db2c60bN.exe

  • Size

    72KB

  • MD5

    ac552ffa99b2d5f6c6c0a1b0bef94480

  • SHA1

    d3f841d00e8a2553e3d73aaa91fd573bc2ef5f69

  • SHA256

    bc3bd98388d47321bce7e3dbf84a2cbc06e81a9c3c73c98392d1d22e5db2c60b

  • SHA512

    3e3abdb38994cb9efa1769bc72484151e57fb399b12ab2fbb936db86bbeb1a0e8cdacc05d08dc7974c9d3749310aa4ed4f01064d08638ebf345b27643db84b48

  • SSDEEP

    1536:IYbU/Q9BZRPa/P+W4a6T5WH5QTtC0gQn+AMb+KR0Nc8QsJq39:HbUI9BZRPi94XTCqTl9ve0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.10.128:5001

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc3bd98388d47321bce7e3dbf84a2cbc06e81a9c3c73c98392d1d22e5db2c60bN.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections