General

  • Target

    14a1eb3c7df6c90b2d5f1ca518c60ad18d0fda95439d25d4a0dce6a0e6a31d92N.exe

  • Size

    72KB

  • MD5

    9ccbf915953222bf9691f6dbeba86160

  • SHA1

    d4c444c9054bd7d8de73c7dacff06715f8d07d88

  • SHA256

    14a1eb3c7df6c90b2d5f1ca518c60ad18d0fda95439d25d4a0dce6a0e6a31d92

  • SHA512

    4da17c29540efdc02680ffc8be4e3bbbb9f4f2763d65fb58b0ec56e10356fae60ff7068be96733a1feb9a122dca8cd7f1d3c95aadec9d666108d42fff8c94fb1

  • SSDEEP

    1536:IZSwluVyDlU5A/mx3kJ2baMW9REGBsNwMb+KR0Nc8QsJq39:nI0A/mxdbdW9R9BsNwe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_hidden_bind_tcp

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14a1eb3c7df6c90b2d5f1ca518c60ad18d0fda95439d25d4a0dce6a0e6a31d92N.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections