General

  • Target

    shell7000.exe

  • Size

    7KB

  • MD5

    dbdb87781b1a27c5fc94815b9705ad55

  • SHA1

    45fa5fbb543315d2cfbc0ae85afb71f6f5d5d8cd

  • SHA256

    59976e5abfff0a1137e50a7f0d9fbbab07e0390ca79d0d72e84e2aaabc5dcc3c

  • SHA512

    91e443f02d83abca6fd2876ad82c1111411dbcf056fb2eb3fe0791eb7c312e0b99019af0c7272e22978c72038cff2f08da3071e221063a7b639d8275e8c67595

  • SSDEEP

    24:eFGStrJ9u0/6NanZdkBQAVMWY+JKZqJeNDMSCvOXpmB:is0ASkBQD+J3SD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.49.107:7000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell7000.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections