General

  • Target

    tmp

  • Size

    7KB

  • MD5

    b02a06bee6dd247f6bd6b8fe0d81e938

  • SHA1

    4994ec428e900e653b9b55d3699ca5230d48866b

  • SHA256

    844be8ffcd4df8aac194d2b99a308e72157a4ccf31fbbee811c032bfb05fac69

  • SHA512

    b8d0fadfaf37b66d53a86051dfee7e79ccea81e2d97f2ad205f33a69b54dc0c8d976e4258af7bab7e8727cf2c42ee5c671f2e9cb1033b355ad13a399094fe1c2

  • SSDEEP

    24:eFGStrJ9u0/6vEnZdkBQAVK3WYjuKLqweNDMSCvOXpmB:is0+okBQvBKQSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

47.242.243.134:4445

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections