General

  • Target

    dd9862fc20531878ae9bbcc9f4365673c9c569c02f84a34726d1341e0b392ec0N.exe

  • Size

    72KB

  • MD5

    db026f6c6d1c47b2581dc95fb15cd390

  • SHA1

    778919bc385606776c0954ee4c8a822f28858a2c

  • SHA256

    dd9862fc20531878ae9bbcc9f4365673c9c569c02f84a34726d1341e0b392ec0

  • SHA512

    d2e3b029300507373075d0d3a7d37c454aebab56caa7cd5eb85eb5c8b671ea64ff642f53c75c3c5c4fef8f89729980c0d0be3f85b0ba8ea02ab380a3e6ccb2ae

  • SSDEEP

    1536:I3KbZfA8C1WRtQ69uk2+ayFZtoMb+KR0Nc8QsJq39:kKbq8C1EtV9uLSFZCe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.6.2.69:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd9862fc20531878ae9bbcc9f4365673c9c569c02f84a34726d1341e0b392ec0N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections