General

  • Target

    fil.exe

  • Size

    7KB

  • MD5

    9987b5a636c1c460a40767bb1e19f05d

  • SHA1

    659ab4e9e2a443b3806271654fea682c0a0e292b

  • SHA256

    b56bfc1fe9ef6e83ec2fbe08d7920f20013c0beff2920d76ed127ffe41f529ea

  • SHA512

    fd9411b5c3617011a4419aaf6b703f5765c6856a8ca9bb626dfed9d80961d28169d6e464b0175e7ad6e849f4aac62fe72ac97aa1bf5c43417d47c8ecb7a45a56

  • SSDEEP

    24:eFGStrJ9u0/6oQ7nZdkBQAVYWY+4wKZq4eNDMSCvOXpmB:is0x8kBQ7+4wCSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.80.128:1234

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fil.exe
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections