General

  • Target

    bbc8cafbd1dadabdc1c237274599532fba06da6c4a4d5fb35c211e0fe0f362b4N.exe

  • Size

    72KB

  • MD5

    9111ccd85a52c0b05ba9d114a1de25f0

  • SHA1

    a4b068c0e64673538f6f365a8aa9fa4005a53b7c

  • SHA256

    bbc8cafbd1dadabdc1c237274599532fba06da6c4a4d5fb35c211e0fe0f362b4

  • SHA512

    15df3f270f6242922de3f273af6acb8887b956128363a4a6e0d126a91fd93eaca7025510014cc2504c9ae49f854d967090d3b45d2ed5fc94377a47d1f27d548f

  • SSDEEP

    1536:I0aJ7eWzqLxxWp4PusX7+bOzeafdfMb+KR0Nc8QsJq3:FCzqNEiPuDOz7dfe0Nc8QsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.66.130:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbc8cafbd1dadabdc1c237274599532fba06da6c4a4d5fb35c211e0fe0f362b4N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections