General

  • Target

    228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c.exe

  • Size

    72KB

  • MD5

    022451d98d63df7977c47f78bf143ef4

  • SHA1

    75951b804e3da839bebe58fcac2cacbf0cdd76bb

  • SHA256

    228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c

  • SHA512

    f47f9688f88d569bc7bd9ac67e7b2868c2667c77229ee2b74e3cd9c49dcfe50ba46a3fc004a89370cfb595d130598184f95d54499d52add38a3f16bee2639ec1

  • SSDEEP

    1536:IpcphT82hqH5JPKWnWfz+zg5XMb+KR0Nc8QsJq3/:wKvhqH5Z1nWaWXe0Nc8QsC/

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.223.100:5551

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 228e8ed1c0f72d4c4aad2896e3faaabb85bfc35cc6431adfbbff5421beebdb4c.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections