General

  • Target

    4991088d8e32e9eb747295cdf9c52f50N.exe

  • Size

    644KB

  • MD5

    4991088d8e32e9eb747295cdf9c52f50

  • SHA1

    ca4d1c6135164810d3d053ec756214ff8717b008

  • SHA256

    5e14462d5c3c1c48e7a548cad9ec9ed86f48fe506e0be2821204c67547fbd8d7

  • SHA512

    87c5dadf9d8eefd93cc03bd2d33cde5e9bf72dcb0374d84c6117d00e133fa2738b5d4ced4220630e12b659a806353e2fb38862f2f0de09853617536b20e1424d

  • SSDEEP

    12288:CqpX088pDysvmC/UkEp3gos8uXY4cO/gqhd+3C5+qQUjJUU4QdxIYDdtWnI+NKn6:rpX088pDysvmC/UkEp3W8AD/Dhd+y4lx

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

115.236.153.170:26850

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4991088d8e32e9eb747295cdf9c52f50N.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections