General

  • Target

    d6e949162dc687d30794029693740f6dd3f8b5654da055ece42e083c2d035c22N.exe

  • Size

    72KB

  • MD5

    81ed0313f073eba4f4667671842e4160

  • SHA1

    b95d233884d83b3541ca0827cc3e5b20a9a9495c

  • SHA256

    d6e949162dc687d30794029693740f6dd3f8b5654da055ece42e083c2d035c22

  • SHA512

    35689a9ad321405a13ed48d4b80330ba067990048a91eb64797ec3e8f871fa471a322c908e1cb4bec5b915c4b32e003fa41fbad7803e3f6fd65a1b6923674541

  • SSDEEP

    1536:I5x6jUewx7ntpuQgsJr5sUuYNwE7mUK++AxMb+KR0Nc8QsJq39:tjHeWEsHYmyKxGe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.213.255:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6e949162dc687d30794029693740f6dd3f8b5654da055ece42e083c2d035c22N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections