Overview

overview

10

Static

static

10

636f4d0ac4...6c.ps1

windows7_x64

8

636f4d0ac4...6c.ps1

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    636f4d0ac4d1a88940daae75a61013219beaa2dadd2cb20ecb8ddf915245896c

  • Size

    2KB

  • Sample

    220520-rsbdqsgcf9

  • MD5

    04620a9df67c6d5bc5051842cb4979dc

  • SHA1

    958d3ea0e43c32072a43610e42d40de57ade5bc8

  • SHA256

    636f4d0ac4d1a88940daae75a61013219beaa2dadd2cb20ecb8ddf915245896c

  • SHA512

    9de98aa0d7b0bf354fccc91fd810f219033bb017fa95e54bee2f25d94e279b175c1d56b88d02e02c66db033d55967cbea4f1f0451069ab6817065fb9112b141d

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://45.124.64.53:10295/pYBQ

Targets

    • Target

      636f4d0ac4d1a88940daae75a61013219beaa2dadd2cb20ecb8ddf915245896c

    • Size

      2KB

    • MD5

      04620a9df67c6d5bc5051842cb4979dc

    • SHA1

      958d3ea0e43c32072a43610e42d40de57ade5bc8

    • SHA256

      636f4d0ac4d1a88940daae75a61013219beaa2dadd2cb20ecb8ddf915245896c

    • SHA512

      9de98aa0d7b0bf354fccc91fd810f219033bb017fa95e54bee2f25d94e279b175c1d56b88d02e02c66db033d55967cbea4f1f0451069ab6817065fb9112b141d

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks