General

  • Target

    1e7cfaab5c7327080afa446fb2a970888df48434da5dc0cfc8f545bbc7448a24

  • Size

    72KB

  • MD5

    a79097f0149fe962e19adb56c9db3956

  • SHA1

    96d635c5eacdb81d1058323c9efe1431a33aeff1

  • SHA256

    1e7cfaab5c7327080afa446fb2a970888df48434da5dc0cfc8f545bbc7448a24

  • SHA512

    d149a75a2d8e85a7426d6b8f857071521c8693cd98ad6dc210227a31a18a0c56d2807393f6cacb69de9ee334c6f60fe2c0bf078d990de7ee07b344ab6f1971f9

  • SSDEEP

    1536:IQVCWm1umGQ0WQQS88QMiDngemN4GjMb+KR0Nc8QsJq39:2LGDGH/gejue0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.112:5566

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e7cfaab5c7327080afa446fb2a970888df48434da5dc0cfc8f545bbc7448a24
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections