General

  • Target

    d700c48d3cc06bb1e2a10e851cf8d3f478025ce65710d1c579cef8070824f14c.exe

  • Size

    72KB

  • MD5

    f7e8cce600a4420746b84b93d6f03e3f

  • SHA1

    b0f94fc3ce838960071b36730f7b5b935662082e

  • SHA256

    d700c48d3cc06bb1e2a10e851cf8d3f478025ce65710d1c579cef8070824f14c

  • SHA512

    fce2ee30b087ae32cc466f339932fa9ba797a62cc5c655a9120da491f14a90ae01369e55d682c23222a5bf551783d0ce23c56799248e8665eef50dd3566f8b0e

  • SSDEEP

    1536:It8FF79a1bP75VfTDusD+UnRMb+KR0Nc8QsJq3l:i8FF79a179VGutnRe0Nc8QsCl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.234.221:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d700c48d3cc06bb1e2a10e851cf8d3f478025ce65710d1c579cef8070824f14c.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections