General

  • Target

    59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3.exe

  • Size

    72KB

  • MD5

    20ac59dd9267e87ef028da0fdd13bb46

  • SHA1

    446647060d646733698300d6d5ef927091eebec5

  • SHA256

    59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3

  • SHA512

    e96f587301905f91863515586baf8f7a199da2d5b1cfeaa73a7406e95d4964e495790a4d5966f3151ab038071e658aae00a46c97bff0a2d6f024a3408c7e3936

  • SSDEEP

    1536:IP4grj0d8/ZmzNT+x7aPGXLRN4OD2l9AXNMb+KR0Nc8QsJq3t:24gVQzNT+xmPGbRNizAde0Nc8QsCt

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.115:9090

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59db7ae79de489105d02fc5b551c9336299df63fb0c44ccee7ee098188cb8ed3.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections