General

  • Target

    acfe8e220beff7037b022431fcc0f56ca1be207790241eb8f3fc9ed8dd0f0d92

  • Size

    2.4MB

  • MD5

    fc4dc21b9c68eddb7bb919a40b7ca1a5

  • SHA1

    fcb7f57506dea2be4bb693a5335f9d602b020c43

  • SHA256

    acfe8e220beff7037b022431fcc0f56ca1be207790241eb8f3fc9ed8dd0f0d92

  • SHA512

    2170c09a4a1ff594ff2430a0566a7b1bd8fee171a6213bf5a073bc604d299bf4f8e8e1fb194ec8c1a82b9d2a2c258f6af50ff29f035698c6e50e1afd00f24d86

  • SSDEEP

    49152:ix5SUW/cxUitIGLsF0nb+tJVYleAMz77+WASx5SUW/cxUitIGLsF0nb+tJVYleAd:ivbjVkjjCAzJxvbjVkjjCAz8

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.158.128:4455

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acfe8e220beff7037b022431fcc0f56ca1be207790241eb8f3fc9ed8dd0f0d92
    .exe windows:4 windows x86 arch:x86

    0ffb0c1b03081ee555711ca0c1201c9d


    Headers

    Imports

    Sections