General

  • Target

    de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15N.exe

  • Size

    72KB

  • MD5

    cb5b4590ea1cf8e042d3163b85a3fad0

  • SHA1

    209f66e9094013e734f8489426af98cd743a938d

  • SHA256

    de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15

  • SHA512

    a589a26ecb323e3bf4fcccc7f427fcb45aaaf97db4c6c02ee6dd213373daa164a46bfe35547224ebc65bc3394420ecb728e98eaca134fca40e921461c54873e3

  • SSDEEP

    1536:IVUEfezfq8nYHFSSwPLIanG2jAUUPnbETz9Mb+KR0Nc8QsJq39:KUfHnEdA3ArnwFe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.2.66.206:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de14baa2db5b4da97c907d2ee65ecd93a45bfbbc41cacb3aadae28bd1428ce15N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections