General

  • Target

    4f5c477f4db779a9ce31aafdf73c11eff6ab39d1ad95440d5d055f49a1c17ac8N

  • Size

    7KB

  • MD5

    bd1540e1e1b97585585fa942edb4cde0

  • SHA1

    91e6bda77fdb9db11bfb4ab7d4be4b0e82685a17

  • SHA256

    4f5c477f4db779a9ce31aafdf73c11eff6ab39d1ad95440d5d055f49a1c17ac8

  • SHA512

    d41b331e93f8c5c9ec4e58cf3634f68c4c8b02e374de3223c10563acf3e484b44d77e606550a42fce4aedcaf0a1bc111639d2ee06a59c84699632cc258fc78cd

  • SSDEEP

    24:eFGStrJ9u0/652bnZd0BQAVRYQKPqueNDMSeXixpmB:is0hH0BQ5QWSD9eS2B

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.18.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f5c477f4db779a9ce31aafdf73c11eff6ab39d1ad95440d5d055f49a1c17ac8N
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections