Overview

overview

10

Static

static

10

ultimo.exe

windows7-x64

10

ultimo.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ultimo.exe

  • Size

    72KB

  • MD5

    190c94ae6884c9d5fd22b196c1bb5b07

  • SHA1

    53b385c97554da8157d7c3f3ed273f79acc4e82f

  • SHA256

    98772d0f04e50b64ebbd9a077369345e76d09e9929beff5fdabd15bfd17b71d1

  • SHA512

    bb75d6dc731f92331d9b3986dad7bba1128ddeeb417d8bb4db304d82eff0a89a48a9aeedabba94949e2d6885b426fd320c20b9745d51e93d8c5ab8cc847f85e4

  • SSDEEP

    1536:IAvsnwmYNUP593z0RwgSkWK5URwzoJkjMb+KR0Nc8QsJq39:jWwmN5x0RwgSY5JoJAe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

216.238.78.86:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ultimo.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections