General

  • Target

    04462799.exe

  • Size

    7KB

  • MD5

    af98373212138c1469c2c54a96bad3d8

  • SHA1

    9daeae2c723da8e3e1846647fe139f7afbbea93a

  • SHA256

    e36edcdb4fa72f63d4807e67588bcca27001731e4b1eb22b379ae18fcd8c6cfc

  • SHA512

    7ee1e848f925fdc671e295ee0e933257b3e8cf95f2bfacc21ee1c02d945a5ca050c32f8b4a802d25163396b2edb84b21509783c0ace7270f1f423b25be55c322

  • SSDEEP

    24:eFGStrJ9u0/6p28nZdkBQAVnk+HKPqaeNDMSCvOXpmB:is0NgkBQ3+HCSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

107.151.252.121:8082

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04462799.exe
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections