General

  • Target

    dfa4f7aacb651f9268077bdce63ca0728d4cb63a7b5f9355a99747fa4931820d

  • Size

    7KB

  • MD5

    c8fc80fff68c6d3fb7467dd5f32f6750

  • SHA1

    42f0234c96b2447047fedb4d05998e62c504f700

  • SHA256

    dfa4f7aacb651f9268077bdce63ca0728d4cb63a7b5f9355a99747fa4931820d

  • SHA512

    b5ce281afb014c74672fe36e2b3bd39f76d6ddc269e00e303ab12ba872e1ac5e6450fef199f3603ba387bd5bababcc9460ed2da8c5b8c088e482c4040e80f074

  • SSDEEP

    24:eFGStrJ9u0/6HGqRnZdkBQAV16WYQKLqoIeNDMSCvOXpmB:is0AGgkBQAiQFSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.98.40:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dfa4f7aacb651f9268077bdce63ca0728d4cb63a7b5f9355a99747fa4931820d
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections