General

  • Target

    79a97428bdc32013ea20a46a34606f01bf244c3e32dd4ca303fa37b4c6246d22

  • Size

    97KB

  • MD5

    1a579c2557ba345564e28a69ec092642

  • SHA1

    c81a342eb32d54501df4e77ab50ecc6bd4f637e8

  • SHA256

    79a97428bdc32013ea20a46a34606f01bf244c3e32dd4ca303fa37b4c6246d22

  • SHA512

    73b091b5ae880ee9f8a88d00a5f6634f36a5c982b4f8cdd36aaebc7230692504865885c3d7441a3b92731eba767993c83fe8f717991bd7dbb9e9859c1d875abb

  • SSDEEP

    1536:7xBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZGvCBj:71fWvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.80.139:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79a97428bdc32013ea20a46a34606f01bf244c3e32dd4ca303fa37b4c6246d22
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections