General

  • Target

    2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96N.exe

  • Size

    72KB

  • MD5

    c514ef1dfea7168c8fcbcd3c069bd2e0

  • SHA1

    03c7ddc1c0a3f14336e7d898bf7a02dd8559bbb8

  • SHA256

    2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96

  • SHA512

    3e4c81ffb2b55cd8ad1e475f705c66f029a92de629b469ffeba6e8f3dcd942aea0222d6045f55b4e875cbb6c9bda3f96363222300eac94cd08516a1eaccfb932

  • SSDEEP

    1536:ICwWNOD5GssAzoGAhaf0wk0UMb+KR0Nc8QsJq39:twWU/swXiaK0Ue0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.26:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e0f87739f958af64fcd9f7abfa3fb414a500888b05386003380d38028916d96N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections