General

  • Target

    b4ddf3f8d8c16fc0c1e65cdf2fa68097f7b952c3c8ebb8bd44703d85c84f726eN

  • Size

    7KB

  • MD5

    af6f8a99a1b6fe8f440848c454dfc5f0

  • SHA1

    c632ed0800cefed9dda2954c5ea76477bb4b0443

  • SHA256

    b4ddf3f8d8c16fc0c1e65cdf2fa68097f7b952c3c8ebb8bd44703d85c84f726e

  • SHA512

    5edae43c345e9c67dfe3d0cb942d140a814f5031897e30d0ad13ecdc2cad0edffb28c527a796af2a0ecc2cc64d6f9a336f4e9381f596d119ad0e6b311580e98d

  • SSDEEP

    24:eFGStrJ9u0/6LtnZdkBQAVKoOxfwKLqoIeNDMSCvOXpmB:is0utkBQvRxoFSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.98.40:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4ddf3f8d8c16fc0c1e65cdf2fa68097f7b952c3c8ebb8bd44703d85c84f726eN
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections