General

  • Target

    51d06fd3a127c1e68fb7e19d1b5e8900N.exe

  • Size

    7KB

  • MD5

    51d06fd3a127c1e68fb7e19d1b5e8900

  • SHA1

    20984c98842660662809540d4cbf14f98274e648

  • SHA256

    84ee5c314887bc4f8e3657bfd6eb84e90689329e9a8a52fe79b9c00694747d60

  • SHA512

    b20dc936193566a7819b39a0cdb6679564edc4aafacae73154b97c652ee59da13e3d7a768cdc898f44b004cb306e638ba710df6711c0d53a228fe0867a9d284d

  • SSDEEP

    24:eFGStrJ9u0/6ofnZdkBQAV2Hakh7wKPqMeNDMSCvOXpmB:is0Z7kBQ3xhM0SD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.31.35:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51d06fd3a127c1e68fb7e19d1b5e8900N.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections