General

  • Target

    painfulwashere.exe

  • Size

    72KB

  • MD5

    525f1c454b7b8031f6dc7e8914ca9868

  • SHA1

    6a57fedd8790e6882ec6511f2a44e7c5c9277471

  • SHA256

    4abc6ba562cd5678e1a4e5ea4a6330d2a3bf10be74f8dd412977ac5e3582c6bd

  • SHA512

    474e7b76a3fdb2a72050911b289fb7aa5b42b8b5d28a05bcc90be68c51d0e81cfacaf2f495d7d6c5f5ae86771fe82ed71808ee7a50965d220c6dece6fcd3163b

  • SSDEEP

    1536:ImmeHoBQqJQDp9K8F5BX39Mb+KR0Nc8QsJq39:DJH0Qrq87xNe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.8:1177

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • painfulwashere.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections