Overview

overview

10

Static

static

10

69.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    69.zip

  • Size

    1KB

  • MD5

    874bf1ebfc71b3692468875a6f96b2d1

  • SHA1

    3de2a12ff6598e0f2674ab6c36146464f73ee845

  • SHA256

    583f9d0b29ea54c96f6014548e4824c85c581a7cdc4c21ebed7b63f033cf8d82

  • SHA512

    2c38e6ed385a1c7392184d860ae132feed4f30398c68fd076d0ecb0b4a0265e1ab21dfc1cf316d6ea0d3ca8946eac95c8a3b27e767d9d6eae7f491e2795f86db

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.145.129:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69.zip
    .zip

    Password: infected

  • 69.exe
    .exe windows x64

    Password: infected

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections