General

  • Target

    shell.exe

  • Size

    7KB

  • MD5

    792638f04fab15fdfdd40d90de3f543a

  • SHA1

    cf452a13f7b29ba2b6649540571cd3372817f4f4

  • SHA256

    2ca47f7ab7e0b4da1fa3fe7ea4b4cedf431c212df06e68a85d0de372fb20e867

  • SHA512

    5b9b28e5a3764af754e97a4fb6836bd3062121b5edee10900687fb5d069dde1798caf36920d179092e9731b193a097a30f6459da32507a49bf4d90a21997b8cf

  • SSDEEP

    24:eFGStrJ9u0/6gSnZdkBQAVK86WYiKZqM2eNDMSCvOXpmB:is0tqkBQv8iiu2SD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.88.128:8080

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell.exe
    .exe windows:4 windows x64 arch:x64

    Password: 1111

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections