General

  • Target

    d2f5cf7687a5b969feaa255f07c60c82f83eff554bf5891d5ab570366e2ffa70

  • Size

    1.0MB

  • MD5

    ea95e3f8ebb68840d988916be26381f7

  • SHA1

    7fbc62038a6a8ac0327c6a65a747abb2f7778360

  • SHA256

    d2f5cf7687a5b969feaa255f07c60c82f83eff554bf5891d5ab570366e2ffa70

  • SHA512

    69d6355680af49ed756448299fbaba25c46bd59cfa19ac26f73d099e274faa0054de0ea6b5a3c2bc2eaf641efcf9465686a82107f7a18c0b6a0b9514c65c9564

  • SSDEEP

    12288:ziOzmbUeEuM7C4VMKjdjHeRog514/4+2V0Y+ES+o3xj9LoASlF:ziOSDsPVMQ+BcqU9sl

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.4.126:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2f5cf7687a5b969feaa255f07c60c82f83eff554bf5891d5ab570366e2ffa70
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections