General

  • Target

    94b83d1d5d3107ae71587060790e9050cc771393c99a51bc271460067895bff8N.exe

  • Size

    72KB

  • MD5

    5dd3d10ad5654a4a26332740c86bd890

  • SHA1

    2f69aa334e9b968536d4d80b010af301ac6c6923

  • SHA256

    94b83d1d5d3107ae71587060790e9050cc771393c99a51bc271460067895bff8

  • SHA512

    6e60db7cb6baf34e1d847e3ea55efb2a3d6ab53004eab0a2b2f27f5feb8d493a2f8e148d73ff17466cca4c1fdbf2b68324080693a6cf24132e8748b779a6f8c2

  • SSDEEP

    1536:I3bSd4YHIhG3o3bxS8uc8CUsMb+KR0Nc8QsJq39:TdwhAyL8ie0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.15:4445

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94b83d1d5d3107ae71587060790e9050cc771393c99a51bc271460067895bff8N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections