General

  • Target

    56e963dd24abfe6eb19cfc7d71002f30N.exe

  • Size

    7KB

  • MD5

    56e963dd24abfe6eb19cfc7d71002f30

  • SHA1

    5b86cfb9a4515f90c780eadfa345f6d1409de40a

  • SHA256

    4e7673725c1548ab79b87c1b1431024e91cbb99a3c36587d1d6c91432d60cee1

  • SHA512

    9bedc3fa9bc815fdb36a1f5e26a2021ccab9241968f06a83450bdf1574777b175a64840e2b4ebfe88fd9363b9f6b1cfa2358e71e7297f2c4f8478798a15e68f0

  • SSDEEP

    24:eFGStrJ9u0/6SBxnZdkBQAV2GkxYKZqJGeNDMSCvOXpmB:is0n/kBQlxYySD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.126.128:5555

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56e963dd24abfe6eb19cfc7d71002f30N.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections