General

  • Target

    d380401f8f32a07115589d1efe076b573f13bf48f8df7241171220fa0fdb9d99

  • Size

    7KB

  • MD5

    91b8d247925e90a0a4f6853db74ec803

  • SHA1

    c6b2f24b5a1ce86b4ce5459d1be80508489ac809

  • SHA256

    d380401f8f32a07115589d1efe076b573f13bf48f8df7241171220fa0fdb9d99

  • SHA512

    752cd005fb6139593c53d65abea4b905556cd4b8db42f2836b82ec00526206befbb504b470627059d797a8329f47a45d86cd67e064d901f99de18847ccc206de

  • SSDEEP

    24:eFGStrJ9u0/6HL2nZdkBQAV9sYKZqnfeNDMSCvOXpmB:is0ALOkBQbYJfSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.32:1111

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d380401f8f32a07115589d1efe076b573f13bf48f8df7241171220fa0fdb9d99
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections