General

  • Target

    8570e597dd56272bd52960d75b75de1d5d588f5c3281b213303af06fb6b602ee.exe

  • Size

    72KB

  • MD5

    41ad011a481f234b8f66e6722f529365

  • SHA1

    2ff821ec1ff69c7a08483223480eb2f078b989b7

  • SHA256

    8570e597dd56272bd52960d75b75de1d5d588f5c3281b213303af06fb6b602ee

  • SHA512

    c8eff85c426bcbfd7760793498e7142765f3eaf52a3192fa95b5f4f51371dcec97528e004fcdffd97e11b2a3b71741083dbf18cae7e18d156cf2b2ef1ec37b62

  • SSDEEP

    1536:IGoAufiWu14aTU1Yg9mfgpV750Mb+KR0Nc8QsJq39:j//uaTU1Yg9ZVF0e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

185.133.251.112:6969

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8570e597dd56272bd52960d75b75de1d5d588f5c3281b213303af06fb6b602ee.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections