General

  • Target

    MSFpayloadmeterpreter.exe

  • Size

    7KB

  • MD5

    85a64ca73d05452f6ac8e83dc06aa4a8

  • SHA1

    107011234e801d0ed63bec48322604a8a099630d

  • SHA256

    86ddf07a5fe185657f7f2fef0c94cf3681f43e0e872ae640ad1f4af942a45cf1

  • SHA512

    7333a4b3a83982c896951e6b1dbd67746886291188e5e0b55b1d3e615cbf9053b40c92af9f3d77a05ead6ff1e3791f33eccb0ea74cb95447456615f348d3102c

  • SSDEEP

    24:eFGStrJ9u0/6SCnZdkBQAVRYhNwKZqOeNDMSCvOXpmB:is0nakBQ5hNwESD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

51.222.29.60:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MSFpayloadmeterpreter.exe
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections