General

  • Target

    plink-csb-crwd06.exe

  • Size

    7KB

  • MD5

    dc78260d39335f7c0c7638f6fe80af80

  • SHA1

    07bc651380349cac279880026ba4808940469e2f

  • SHA256

    af0c00f7c196e499f1e2a4680d91dad27bcb8a2cfeeca4bddea693e68228e822

  • SHA512

    238f029ea1a447c6ab0fe9e01cd6b12c0def40406fe14859d13a870f1dd5551e3889b3c830011be7bf594d2375a3af08b65d9a01ef82f87d136491d7e3692d5f

  • SSDEEP

    24:eFGStrJ9u0/6bInZdkBQAV2oYwlKZqaeNDMSCvOXpmB:is0ickBQvwlYSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

45.120.107.37:8443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • plink-csb-crwd06.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections