General

  • Target

    1a3eb3ef90a41f2956d2e6c0e4c8cd50N.exe

  • Size

    7KB

  • MD5

    1a3eb3ef90a41f2956d2e6c0e4c8cd50

  • SHA1

    f9658bab1e5f4b767a6303a375407a553e968fd7

  • SHA256

    e39a54b7f9be162656fb6ab2f8f9692d79e56a296521d9b05748fdbd384caf57

  • SHA512

    5a993c0c090aad98d39f199d723267957cb2f13d2bddf7bd67237a4dcec9685b3eb02b3cc07b1cda0f773107a56a57a219f1d20ebdbcf5aa0cf8cf060c53247a

  • SSDEEP

    24:eFGStrJ9u0/6cPnZd0BQAVv1Y+BXKZqAGeNDMSCvOXpmB:is05r0BQYq+BXhSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.202.159:12346

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a3eb3ef90a41f2956d2e6c0e4c8cd50N.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections