General

  • Target

    tempest.exe

  • Size

    72KB

  • MD5

    64264069773fff5592e859085740e575

  • SHA1

    fe6402dae7af819ab138895fc061be19899e9401

  • SHA256

    3a03f725154fbcfb87250be651d4fa461b476bca8368d37bef5a284238c83dce

  • SHA512

    13cd6499819ebec0fb5184b6e45ef6a73ba0a897d6db05f95a0ee1cdaf2cff07758b027722a9b164dc81c0188d58a347c316425a1d857b399eb83516d2f200ad

  • SSDEEP

    1536:IQRWeb0EhIoMl3eOGiJHMb+KR0Nc8QsJq39:NvjyJde+e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

35.164.165.62:8090

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tempest.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections