Overview

overview

10

Static

static

10

ultimo2.exe

windows7-x64

10

ultimo2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ultimo2.exe

  • Size

    72KB

  • MD5

    d4e2b11e1b8c5a9169ee1f934bd1267d

  • SHA1

    37a5ff49ba67810b82bb15ff0fabcdbf06f2f1c6

  • SHA256

    5c70d5a7f2547851419cc91c89bf4e7bd1cacdb4b88b2d0ea980594fab3aa06d

  • SHA512

    39d415ef76db97af6482ee98ca4f5bf1b7a4ca27412540ca963bf9e9a4c9b63b8bc6a4e2f29c74693ab1eb4033b107c46945984427fddd45ff54f8a44e1fbf0f

  • SSDEEP

    1536:I2vylTmr1D2wsiBO3fUxeuhxEEntbAMb+KR0Nc8QsJq39:rvyFmZKwc8x1xEEntbAe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.4.221:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ultimo2.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections