General

  • Target

    e2ddf27b253927f90471be1a924458ed5773afbb7867239a634e0d30e8070dbc.exe

  • Size

    72KB

  • MD5

    9e3845f22d7b3a6786190b3222b7b3e7

  • SHA1

    e693041403af84ff6c90a3ac9ac02fb802002b25

  • SHA256

    e2ddf27b253927f90471be1a924458ed5773afbb7867239a634e0d30e8070dbc

  • SHA512

    5900eef57132ea2c75f93b9da12bd437a7640066e15c89ede52d2985b13263b4c3c3b488788a968f035243ddbf6c93b962283897d8c2c83f4c9390be54aa8b6e

  • SSDEEP

    1536:IB4GWSNwIKLAu6NZuUvU5OJxlKJIBoP8EQMb+KR0Nc8QsJq39:tSNwVM9Qy8OeIA8EQe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

45.155.249.178:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e2ddf27b253927f90471be1a924458ed5773afbb7867239a634e0d30e8070dbc.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections