General

  • Target

    tmp.exe

  • Size

    7KB

  • MD5

    459976dc3440b9fe9614d2e7c246af02

  • SHA1

    ea72df634719681351c66aea8b616349bf4b1cba

  • SHA256

    d459bd8e6ababe027af56fc683181351be1d4ad230da087e742aaef5c0979811

  • SHA512

    368d943206bb8475b218aefd9483c6bedeef53742366a7f87fe638f848c118097b99122bc6245538b92255d586c45d0de54dbd399a4c401d19fb87d5f8ecc400

  • SSDEEP

    24:eFGStrJ9u0/6+enZdkBQAVK86WOx+WYKZq452eNDMSCvOXpmB:is0z2kBQv8Ix+WYa52SD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

176.122.27.90:8888

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections