General

  • Target

    0c6f90d2ed763c4ea1c6b3a86e4d2bb4.exe

  • Size

    7KB

  • MD5

    0c6f90d2ed763c4ea1c6b3a86e4d2bb4

  • SHA1

    9dee08ba535a1ccbd3150f4c3faa2a8d161aa83d

  • SHA256

    b27d6cb33d66dc4a062eeb3b4ed65e4534d9b83c5eb9f694c863a86a186b8096

  • SHA512

    fae571c231c98ec85191ab18f8f63178075ba72d365f83521de3f76babb4927b8b0507edb22e2f464c6a6dff083c6e895abacce07240a4f1f43e331f6b627d45

  • SSDEEP

    24:eFGStrJ9u0/60GnZdkBQAVIaYNwKZqn/eNDMSCvOXpmB:is0tekBQlteJ/SD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.192.128:1111

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c6f90d2ed763c4ea1c6b3a86e4d2bb4.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections