General

  • Target

    painfulwashere.exe

  • Size

    72KB

  • MD5

    bd4da012e0bc04b46c47d7b096c3f985

  • SHA1

    147d29213f883b28ca7c78b5e73df3617d17d033

  • SHA256

    417c6d41306b4472410420a8bf19543fb5835e41e2b7940887e46ca9603d1a2c

  • SHA512

    f045dc7c7c5891361a004a03d758dbd1034fd27abc85ed699e4fac41567fa87f7eb89d203e90ccc7d25d860dcb860cfc1eb8e75b046e329b2f5ff9837b6ac307

  • SSDEEP

    1536:IrcqaeJ3xmdk/P5gfWkBYNKdXMEBMb+KR0Nc8QsJq39:7me2K9e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.19:1177

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • painfulwashere.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections