General

  • Target

    4b3f2fc3eb77d6317f515b465a31712a7f76fc28e758a8307ed8b503dc5b5d69

  • Size

    97KB

  • MD5

    9a6f29269a78f5e05add99be4352ee2c

  • SHA1

    f5d5e290c723302153bf1b4fee35e682a6bae593

  • SHA256

    4b3f2fc3eb77d6317f515b465a31712a7f76fc28e758a8307ed8b503dc5b5d69

  • SHA512

    7611f4222e586806d0562dbe2d7079081efbc3386974475d3c6c7432f62aae2b7dcf964d7737369a3b6598ad5a5617b44ede7be96a1bff9d5d0aea2e80f1f609

  • SSDEEP

    1536:LxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZGvCBj:L1fWvCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.80.139:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b3f2fc3eb77d6317f515b465a31712a7f76fc28e758a8307ed8b503dc5b5d69
    .exe windows:4 windows x86 arch:x86

    827f25806d6b1a858d85fd1eae1f7b36


    Headers

    Imports

    Sections