General

  • Target

    tmp

  • Size

    72KB

  • MD5

    15ece4effa4ef7bff75e2f743d59e23d

  • SHA1

    cec21cfb46f41cf4c105dab1a98254e033d7a704

  • SHA256

    08570c71571d49e58d11c795117a90746d510b26ed2bad4b8c6210501c8e6927

  • SHA512

    fc78790fc9ee560e395f06731435a40a49ad5bdfdc6bc28330336e3dc6680fa1b7ec5dcf62a412489f4cf577506fc0a434ae662fa09408085b44bd24958b0af8

  • SSDEEP

    1536:IsoYkM3Vqwh1606stwo/zcwbUP927JkMp64rPQMb+KR0Nc8QsJq39:yM3VqP063OkMwe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

148.135.4.58:23333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections