General

  • Target

    0c1ae70e9491b1e5d798b07ac085a245.virus

  • Size

    7KB

  • MD5

    0c1ae70e9491b1e5d798b07ac085a245

  • SHA1

    7a3a568accd476ae636e09d2ac9b85b90e284687

  • SHA256

    632dfd36099795242059771ea0d1053434a482f657508790cfbc87c68217cb1f

  • SHA512

    7203cf96e1bb893cd0e929b1d36eb6c409a7e2095e6a114d1639f2c88cd91ded4a20a9f452eb7e4c640fa72731bdb4eddd2672ae09370bc02ffb34dac4dfb807

  • SSDEEP

    24:eFGStrJ9u0/64o2RnZdkBQAVoaOxLYKZq6eNDMSCvOXpmB:is0no2hkBQVXxLY0SD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.0.3:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c1ae70e9491b1e5d798b07ac085a245.virus
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections