General

  • Target

    f32dcfd94f80b2152758c3a92a356a91525663e8f867ccf1aa889f959a9b6739

  • Size

    121KB

  • MD5

    ce6e915d91dce3c53a2b7d79d9cded3f

  • SHA1

    51838263949ebeb7988639a8044d07c5260f670f

  • SHA256

    f32dcfd94f80b2152758c3a92a356a91525663e8f867ccf1aa889f959a9b6739

  • SHA512

    0fd7a8d9c167c46cb15ec72101b4acb5032f49979d9613b2f27b4362e6291516ab22c09aa9928cfc40c099bb8281f8f879e88b0f51f361175cddf691668b69bc

  • SSDEEP

    1536:pegkuWfDb7B8LKB+si0RF1+7w1FYc3A2buRNKv1FN2WbekHV2V:AFvfDb7FG8Pbu6X8V

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.31.140:2221

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f32dcfd94f80b2152758c3a92a356a91525663e8f867ccf1aa889f959a9b6739
    .exe windows:4 windows x64 arch:x64

    c6c77d2dbde5bc54ae3740832feb6011


    Headers

    Imports

    Sections