General

  • Target

    508cd056d6e4fb9a2007cdd5b4331250N.exe

  • Size

    7KB

  • MD5

    508cd056d6e4fb9a2007cdd5b4331250

  • SHA1

    3b397855612cc0de27364221b1c2c83358d64ad5

  • SHA256

    e30d5cb9572292030e37615918e62e6181143e41fd91b24a98a731901640b2b9

  • SHA512

    c8f29cbbea8755347e5de2b7c82ff94d848cabb3279aa0be636947201df65c5d095faa5001abed42b4fc9cb2e50b7935e0eed2a79568717e46984d853c1f5413

  • SSDEEP

    24:eFGStrJ9u0/6XTnZdkBQAViWYYKtRqdNGeNDMSCvOXpmB:is0W/kBQNYKuISD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.10.19:4000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 508cd056d6e4fb9a2007cdd5b4331250N.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections