General

  • Target

    runme.exe

  • Size

    7KB

  • MD5

    65d3b770d889285f85fb28e8daa07a8e

  • SHA1

    06ea6acb84b95e79e076d1257ef14f77232fef1f

  • SHA256

    3c6d5d3a90ce2c440f0c40500d804ad6765e1ae15de0cb6c08bc55c490de395c

  • SHA512

    12b3afb5a1023dd9241ccbcef717c795024b634711117969b21fee9ec5002b45810c8550c6ae462a4753ddd9caec37cd326bbc1b77d4a0e194c82936799ce92a

  • SSDEEP

    24:eFGStrJ9u0/6nxV/xnZdkBQAVKHaOxRwKZqXeNDMSCvOXpmB:is0gxdBkBQvHXxRwpSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

34.170.249.238:4445

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • runme.exe
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections