General

  • Target

    6eda04fd4827582578bc9c4ac266b920N.exe

  • Size

    7KB

  • MD5

    6eda04fd4827582578bc9c4ac266b920

  • SHA1

    c1764a83253174101d1b62d6bfd0b1a622e1071c

  • SHA256

    0899976ca6c9da9d0f446e3eb084959f882c01ea2a987fdfe8b5ea0d8fed7732

  • SHA512

    9ae5cb50503169d20ede63abf2cf9a1d09f3df9d8cf20672692c450039d3e2a14697c77dd411f4a5f420e52a5a5c20a9c7ca1da03239ca3f29cbfdd522cb614e

  • SSDEEP

    24:eFGStrJ9u0/6H2e/PnZdkBQAVKoYYKZqWeNDMSCvOXpmB:is0A2OrkBQv/YoSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.229.132:1111

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6eda04fd4827582578bc9c4ac266b920N.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections