General

  • Target

    6c7b67171ed264070d97a00bb9393ff8fd42206dffcc93a4fd0cad6421fda5dc

  • Size

    7KB

  • MD5

    736674ddeb51bd3e32a9e3a10fa9d90e

  • SHA1

    91ac9d0f06f2a0726191d3878bdb63e2ec76a14e

  • SHA256

    6c7b67171ed264070d97a00bb9393ff8fd42206dffcc93a4fd0cad6421fda5dc

  • SHA512

    3e5ddc7493f50dd7552877c01657ba28213cdaddd2a1c40f5b5d19da656c7f66a84c6e5b0ea9f6e8b4a87ac416f625fb0f0e8a9e056c224ffa69d94d44ca0fd6

  • SSDEEP

    24:eFGStrJ9u0/6vqo7nZdkBQAVK3WCYKLqEeNDMSCvOXpmB:is0wnkBQvSkSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.10.123:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c7b67171ed264070d97a00bb9393ff8fd42206dffcc93a4fd0cad6421fda5dc
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections