General

  • Target

    Malware.stage0.exe

  • Size

    382KB

  • MD5

    6d8895c63a77ebe5e49b656bdefdb822

  • SHA1

    de8fb0deb6a0ac1f621950270f0ee312357401d7

  • SHA256

    fca62097b364b2f0338c5e4c5bac86134cedffa4f8ddf27ee9901734128952e3

  • SHA512

    8f5a2f6f7b586fdf350e6f3042d59154aaf73cab2307e5c28bbcf7fc3fc6519792df01f799a9d61ab9a3ee3f61ae59cc58241422ab4c5f543b6ddabac6253e11

  • SSDEEP

    6144:vgumhJWXPXqq8K4mBw/1MWYWqEkmz30WR6Pac/2ySi3WnjCTVtbo:I1hJWXPttjCqQHnLv4CfwmeTv0

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:8443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Malware.stage0.exe
    .exe windows x86

    4ac3a68b027325fa15901334d5667567


    Headers

    Imports

    Sections