General

  • Target

    tmp

  • Size

    7KB

  • MD5

    6f0f2d6b5bc2f5ff93b8816486801b7a

  • SHA1

    bb22e8065d6893c4f531c80f0f3ce26b0e02eb55

  • SHA256

    d21b14e30cbd3bed19faf038c7db39ef71ac3c52d1c2693ead5ec93e83274dba

  • SHA512

    f89ba6171de05fed9ed3f078abf08a9c59a6b84880eb554ef0f548afd7f48cc1df2147801fefa3e27641b93954a564e41d0df77bed9e81cc70aaa51bc6a48ca4

  • SSDEEP

    24:eFGStrJ9u0/6l0nZdkBQAV7xWnVQkJYrXoBdbkNjYxIOKobzNpmB:is0MYkBQINkJYEXwxYiFB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

139.162.248.175:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections