General

  • Target

    1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599.exe

  • Size

    72KB

  • MD5

    242442292bc3363e911158a3bbdc1ca5

  • SHA1

    cdbbac8d78de04a0cad3ef2715547e1a97106ecf

  • SHA256

    1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599

  • SHA512

    06ffe7b12633b506b2b8333f7a5a2b6642572df12ee60dfe0bbddc47f67cbd0d60dc5f14a8bcdcc69472a3c12f810c4f5f388a694a04769470a4960b471f63da

  • SSDEEP

    1536:ICwWNOD5GssAzoGAhaf0wk0UMb+KR0Nc8QsJq31:twWU/swXiaK0Ue0Nc8QsC1

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.26:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1efe41ec0f0a93350d8ff35d2d4c15fda86d8114a78330511321910b4aeee599.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections