General

  • Target

    ad90577171dc75f045ea2fbb0944c4817484d9784da9bf6a3f0ede0e49956797N.exe

  • Size

    72KB

  • MD5

    b681b204e7bc494af3b3d7430ed11e80

  • SHA1

    36962ca73637aa6fe315c7d39acf31374b1eb880

  • SHA256

    ad90577171dc75f045ea2fbb0944c4817484d9784da9bf6a3f0ede0e49956797

  • SHA512

    e722f4fc6bfed20626f5b76688545687c407067ee00cec1fd71d04b8f19acfe67c1aee92275f3a084220097b19a1fcce517ec52acdf6f503a62a67eeb3be7e94

  • SSDEEP

    1536:ILyM40nPqv1A1RZuPjrfbrY4NT8Mb+KR0Nc8QsJq39:b0n6aZcjnrYre0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.30.55:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad90577171dc75f045ea2fbb0944c4817484d9784da9bf6a3f0ede0e49956797N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections