General

  • Target

    pc.exe

  • Size

    72KB

  • MD5

    ebbe36e376d4323f3cae82993b66f8bb

  • SHA1

    3fb32a416b116f76e123d4032f2d2c2db820d99e

  • SHA256

    4f23ee0747a622f7e1063bf276e25e79b4b759375aec6a16d7e1645260ecd750

  • SHA512

    bd3743249e9b2db6a4c1a71a544d9dad9161c35cc77abfdb2b2bb97e3a8f7c0562b13f1603286b368f145288144d84e12e1eb36ea8e2862b6ada76a5dad3cdf9

  • SSDEEP

    1536:IbEZvOrJrk7xSgkTqcVMb+KR0Nc8QsJq39:Bh7xbCe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

164.92.154.140:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • pc.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections