General

  • Target

    x64shell.exe

  • Size

    7KB

  • MD5

    22649124da8f23b7723577baec5a6406

  • SHA1

    244fe3174ed743d7af993aa355b461af554650ca

  • SHA256

    d99673a35f9e6461780793ea6f52423832f9d13a02ca084d3f8ed45cbe04babc

  • SHA512

    3a45cb7611827771525d5b997ee78beccf3600ae5444a5ba6bda37d2c77b6d74c61e472ad73bb1f23a14904a7e6a4cce39fe20aa67111a4450ca59d8c52fc8f5

  • SSDEEP

    24:eFGStrJ9u0/6swnZdkBQAVKWYNwKPqteNDMSCvOXpmB:is0FkkBQleVSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

103.98.214.143:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x64shell.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections