General

  • Target

    883f7ebf8551bee338da24f9566f7049c0e2537ed2a15db5cb147c1dd8743e37.exe

  • Size

    72KB

  • MD5

    b3749c71a8e12cb59324980ded5cf996

  • SHA1

    4087310247584f3cf4580f376400befee73df58d

  • SHA256

    883f7ebf8551bee338da24f9566f7049c0e2537ed2a15db5cb147c1dd8743e37

  • SHA512

    fd5a6405691660a65077778ba8302edacaf4baabdf59cd1c99c54f920251c5d07bf5c25d460ca59dc489d4fbc0c1c0952be736fba13861ee84256939ce670ca3

  • SSDEEP

    1536:IJ/6VO9SK+lN4wZKVsRJTvV8TMb+KR0Nc8QsJq3l:BcwNR4Mse0Nc8QsCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

36.155.161.120:46407

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 883f7ebf8551bee338da24f9566f7049c0e2537ed2a15db5cb147c1dd8743e37.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections