General

  • Target

    8ba24b6e0d718d11bed8d1eee5baa127f7e7c498288d813e65ae65957cea055b.exe

  • Size

    72KB

  • MD5

    faadeb87e5595470836ceaaae05b029b

  • SHA1

    faa3333c81dd13da5b8e43b956dfef3ca2c00cec

  • SHA256

    8ba24b6e0d718d11bed8d1eee5baa127f7e7c498288d813e65ae65957cea055b

  • SHA512

    3ecb55e9721738578a49e5aef4ca1c426ec9af7184b174eaa8a5f4b8c047ed70f749d0f1b56d23402f8fc8a068a9a2a895fc9e34eaa6d6290a54db03c595dc99

  • SSDEEP

    1536:Im2b1S78e02FHnWssW8AdWaIAFpMs1i9AjMb+KR0Nc8QsJq3d:N2b1S78e02FHmb2WSPMqi9Aje0Nc8Qss

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.136.129:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ba24b6e0d718d11bed8d1eee5baa127f7e7c498288d813e65ae65957cea055b.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections