General

  • Target

    Bitrixx228.exe.virus

  • Size

    7KB

  • MD5

    864c832949cc0c8c7ef6ed23d4a6eef3

  • SHA1

    3f6582bec0a4bb4bd4c8ae432dcade00983761e5

  • SHA256

    8a4692d64fc20b837630d4401e26f9b5ef65546eb28a5271a1fe3a80729a8654

  • SHA512

    bf840763f86c8f5db2494f68842c23282ee1aac7d50beec17267a0f6f350d1ba8d4987bf5ea8b0d718806dcc32bb63da56213e1db10e599b2112d7a8f78aff04

  • SSDEEP

    24:eFGStrJ9u0/6NJnZdkBQAVTOxNqlKZqT1eNDMSCvOXpmB:is0IZkBQNxslvSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

180.100.217.219:9008

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bitrixx228.exe.virus
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections