General

  • Target

    2a49babb423a11f300d463804cb84875

  • Size

    612KB

  • MD5

    2a49babb423a11f300d463804cb84875

  • SHA1

    19e65e1216a7593e00d1a22c4b08d00cf04006ba

  • SHA256

    2609f1662eb991f454373101106a6202185f8e908fdc93ab4390e2677f179c08

  • SHA512

    12d4e960b82ad45d849ac1f74312e89f509f2e2cd916a83ef02b526c9408760faa6c88e7e6ab590f5dc04e46024528b801c2a66fb4ee59460713b53ed9d571f7

  • SSDEEP

    12288:m1p9ydQBLGJbclrlVs6BpXEUEJvBqhrdP5OBfJXA8QP5OBfJXAs:mngGBsclxG6BpXEUEJvBqhBBOBfJXA8F

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.15.42:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a49babb423a11f300d463804cb84875
    .exe windows:4 windows x64 arch:x64

    e2a1496c94d52a035fe47259ee6587b7


    Headers

    Imports

    Sections