General

  • Target

    afc1962f51ffb484b12c57162875a20368385146e4ba29d925a230a24877d6b5.exe

  • Size

    97KB

  • MD5

    2da8bf50fd47036c164a8b2c157c3bce

  • SHA1

    2e1d3207252c80d5b38a8d22df88321f674fb6ff

  • SHA256

    afc1962f51ffb484b12c57162875a20368385146e4ba29d925a230a24877d6b5

  • SHA512

    4d295f3007dc91a6fbdff6a8616eb7134c494de996de8adbe087986515b9986500d422ee4a619462d46a5f43099393c408ac89e43c238ab1d3f9466193f9c1e5

  • SSDEEP

    1536:R5r1wXJoRiTJcYuGLWy5rw3TX2af8JNv4oh+ycDkL17A:xsl9tSyC3TuN3BA

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

209.141.35.225:444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afc1962f51ffb484b12c57162875a20368385146e4ba29d925a230a24877d6b5.exe
    .exe windows:4 windows x86 arch:x86

    b83abd4147de9f42238e9cf786ce8411


    Headers

    Imports

    Sections