General

  • Target

    a4a248b6d06221e3b4c8d81d1c3b7c40N.exe

  • Size

    7KB

  • MD5

    a4a248b6d06221e3b4c8d81d1c3b7c40

  • SHA1

    0d153e3015c6e46031ddb4f51656251572752628

  • SHA256

    9db74f406b8103e220c4da74de32691598b2f1027e0952d2cd0cf163d8ab80d2

  • SHA512

    577fe81d59a3139763b2c64257c5e6c090fffbb6bb99014f9e11ad50abcb665537830dadddeb8a0e89585e867e1d23d66a0326a2c8054190386c250ae7735615

  • SSDEEP

    24:eFGStrJ9u0/6TwNnZdkBQAVoaY+4YKZqfeNDMSCvOXpmB:is0MwNkBQVt+4YZSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.16.239.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4a248b6d06221e3b4c8d81d1c3b7c40N.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections