General

  • Target

    payload.exe

  • Size

    7KB

  • MD5

    9b0a2f1779de860e3f4e5d3fe491478d

  • SHA1

    3073f7e9eae2852cc44483092bb4f4bb3043904e

  • SHA256

    481c8532ddcf182b9848e768c913070c45b5b4221b55773bcca22b71247f8ccc

  • SHA512

    619394087d74eeac9ea18c9739022ba7b5697c52f1f783c23bcd0c66727064023aa56120aa577574271ea699f1a0cbeaafa2a5a35e492c2c500724411da86582

  • SSDEEP

    24:eFGStrJ9u0/63kRnZdkBQAVXcIlKPqieNDMSCvOXpmB:is0KkhkBQnIlaSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

138.197.40.158:6558

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections