General

  • Target

    payload.exe

  • Size

    7KB

  • MD5

    f25d0f6ee077d7a098f7aaacc50c13c2

  • SHA1

    c4ee3c3c5e167ed262d557aa7152e113b7947337

  • SHA256

    34a395678f2dfe01bce1afdf5f01fc3825f50d5399b9b2e436d8d660bd350fc9

  • SHA512

    215499765a54974565daddfb1dbedac4e41ee2439cceafa884bd719a93761efbab49269c81a4c7e9500e6d2a2d68ad488a220bef061d737c1472db9ddc3a6ca7

  • SSDEEP

    24:eFGStrJ9u0/6WbHnZdkBQAVR1YfwKZqaeNDMSCvOXpmB:is0XbjkBQiqoESD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.100.63:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • payload.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections