Overview

overview

10

Static

static

10

db48c9a682...63.exe

windows7-x64

10

db48c9a682...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db48c9a682a554a80c91233b2ae4368bdef88aecdd75a76ff90c281cb9c79e63

  • Size

    59KB

  • MD5

    1a6a55afafb3e2e50ee480438a2347d5

  • SHA1

    d50631b514216184560857af8c01a5df756c6048

  • SHA256

    db48c9a682a554a80c91233b2ae4368bdef88aecdd75a76ff90c281cb9c79e63

  • SHA512

    07661c6467d324443cc7a4b2f49bf5fb2e8ef4e5aad2457eee9b6910d64aa0e8c2cf37b447a4d8382ac6aa58fc9db1c9d30c6a3d5311bf8669e2bf5263b32074

  • SSDEEP

    384:XVNvIheTQ52yqJZqhVIn7o0cCi9gHulp3GoClB1JOLzQfBX+cN/H/P89Z5N:XVVMYymD71ulpWoClBbOLqBui/fP89

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.219.144:4455

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db48c9a682a554a80c91233b2ae4368bdef88aecdd75a76ff90c281cb9c79e63
    .exe windows:6 windows x64

    a4e1d20361f5c993d471d91c7fb37b2a


    Headers

    Imports

    Sections