General

  • Target

    70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7N.exe

  • Size

    72KB

  • MD5

    d67cf1185c24a192f5cc4fae6e8e4a30

  • SHA1

    15899a1dd7c1a1354d4936a848737a966a89559a

  • SHA256

    70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7

  • SHA512

    ef4e7dd31d2d5046e381c8b4f9c7099a749aed89f54d1f6c61496e65dab01ef5dffa0769ef407a0ea41c44aa1fe5b70082feb9ea000250d3105c7181704251c2

  • SSDEEP

    1536:IfizxyZmYxeuofx16zZOMb9fBKYs+OF4Mb+KR0Nc8QsJq39:bzsZmieuofX6zZ13s+64e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.106:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70497bada46a1cf9557c2c749dde07a86e7704b4f300ec0665928cab00018ac7N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections