General

  • Target

    4bd09f8644ff3833997efc7305ed9cfd6442733293a40e08bab13998d7f6143f

  • Size

    72KB

  • MD5

    9f19d6f3458eb80440984748d9d2cc75

  • SHA1

    6d948467b18d327540c5c896f61596ccecd332bc

  • SHA256

    4bd09f8644ff3833997efc7305ed9cfd6442733293a40e08bab13998d7f6143f

  • SHA512

    51e0b98cdca0a5f552eed136396963c313167d3156bcd5e68f346eb585f1848385e37c15077d3b0548bd91efa769e95ef2426e434f4fe0cad53cf425217ead79

  • SSDEEP

    1536:IRWlH2hdG4mWNWuQQ34pLQiCK25vOMb+KR0Nc8QsJq39:SWleIBXd24xQiCK25vOe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.59.132:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4bd09f8644ff3833997efc7305ed9cfd6442733293a40e08bab13998d7f6143f
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections