General

  • Target

    funnis.exe

  • Size

    7KB

  • MD5

    926b59a18bcdf8b25724c8baf6687a29

  • SHA1

    4b78761ebc94c4236a0aae719a61ffd6ff9f9669

  • SHA256

    0599d17438b86ed036ed8d711460bb094de09b682dc4c51ebaaafc6d0f949baf

  • SHA512

    44d48c648f51f9146cf6ec95d68ddaa7c71447fbd957fdea31ef16f961d30e0695a2e0a49c27cfa6ca1bde3167f05b927ffdcc54e56a9ac0acd8255e6173a2fc

  • SSDEEP

    24:eFGStrJ9u0/6HoQnZdkBQAVbcfYKZqveNDMSCvOXpmB:is02oEkBQXQBSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.31.189:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • funnis.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections