General

  • Target

    Bitrixx266.exe.virus

  • Size

    7KB

  • MD5

    5c6d97ac4f76942a907b19f806a22040

  • SHA1

    18b9f4e8b4ef1aa989b46a5db2f127f1278a607c

  • SHA256

    166cd1d3c81ffdf767178a3b21cc9f7185a803fdde2e253f803893dac1b60827

  • SHA512

    230a17db45ca6e06c79f86a8c79b78bc0a27123e36f54f8bed7b8160da06439d40a9e9e0f95903e327165df067574c6155dc530a39fba5a2e55c52c7efdf58b0

  • SSDEEP

    24:eFGStrJ9u0/60WDnZdkBQAVRYLwKZq7eNDMSCvOXpmB:is0NWvkBQ5LwhSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

123.178.155.114:9006

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bitrixx266.exe.virus
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections