General

  • Target

    tmp

  • Size

    7KB

  • MD5

    aa752f99b9bfd2ebbb36acdfdf2fa2b8

  • SHA1

    3bbc6451e5e38b907be99c5e0312acb74cffe3a3

  • SHA256

    cfa53d4cc152a779f364410b4c5a040981323c12b78fd929c11c1135b2a502f7

  • SHA512

    7e8c4a88d40720bc280e3b1b0b7d3e9aa751d22c797af683209d06a716c6d34424983648f4a02058d2421f486bcafc9a945a40762f191c6e3c76e2c2f283d4bb

  • SSDEEP

    24:eFGStrJ9u0/6hQUnZdkBQAV2ofGGKZqfeNDMSCvOXpmB:is0b4kBQ+htSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

124.221.70.199:4448

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections