General

  • Target

    agent.exe

  • Size

    72KB

  • MD5

    aff07019035bbfe5bac96d943fadb530

  • SHA1

    8a9b99cbd0d9ab725c5cace0ef9a73658a1c96bc

  • SHA256

    c2e367c6f38b6276680526550403573a74e4db2f2469c7936afc2b935781feb6

  • SHA512

    99832091629c45f785f842ad69f46054c6cda5ed957fbc26a6b4b7d2ae73f62871a51270c8f5d2749ee7803944d0f282cfcfb9b2168476a8814b063fc0d292df

  • SSDEEP

    1536:Iih37HVVqRC/HV+Xdun/5iDiMlrMb+KR0Nc8QsJq39:TZVwRC/Acnhi7e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.104:44444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • agent.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections