General

  • Target

    7dce1875380b33521ba701fdb7c7f5b7c30da6723b0984d23e7383eecca949a6

  • Size

    22.4MB

  • MD5

    8bb3635abbd1922d64d53244a24860ec

  • SHA1

    bc779efd834eb3d2e809bf0d20f99b3b7b9e0a31

  • SHA256

    7dce1875380b33521ba701fdb7c7f5b7c30da6723b0984d23e7383eecca949a6

  • SHA512

    d95e4ce34184acc6d8e7c109a28805f02790fad51a51a111ea2dd2df3dfd099d1a179f519bcd8128f22b2257c4f0bbb945ecbea15e6de7f07d581dacafb3a7fe

  • SSDEEP

    196608:J878tY+QV1JiZJVBW9SuE+pzDcNDwOYPE9332EzDcNDwmf0BAblw:J878CX1JiZJVBeU+rOkbqmsmblw

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 3 IoCs

Files

  • 7dce1875380b33521ba701fdb7c7f5b7c30da6723b0984d23e7383eecca949a6
    .tar
  • .gitignore
  • CONTRIBUTING.md
  • Gemfile
  • LICENSE
  • README.md
  • Rakefile
  • data/android/apk/AndroidManifest.xml
  • data/android/apk/classes.dex
    .dex
  • data/android/apk/resources.arsc
  • data/android/meterpreter.dex
    .dex
  • data/android/meterpreter.jar
    .apk android
  • data/android/metstage.jar
    .apk android
  • data/android/shell.jar
    .apk android
  • data/java/com/metasploit/meterpreter/MemoryBufferURLConnection.class
  • data/java/com/metasploit/meterpreter/MemoryBufferURLStreamHandler.class
  • data/java/javapayload/stage/Meterpreter.class
  • data/java/javapayload/stage/Shell.class
  • data/java/javapayload/stage/Stage.class
  • data/java/javapayload/stage/StreamForwarder.class
  • data/java/metasploit/AESEncryption.class
  • data/java/metasploit/JMXPayload.class
  • data/java/metasploit/JMXPayloadMBean.class
  • data/java/metasploit/Payload.class
  • data/java/metasploit/PayloadServlet.class
  • data/java/metasploit/PayloadTrustManager.class
  • data/java/metasploit/RMILoader.class
  • data/java/metasploit/RMIPayload.class
  • data/meterpreter/elevator.x64.dll
    .dll windows x64

    db30ab1188e9f9fd120bcbcaad845d09


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/elevator.x86.dll
    .dll windows x86

    ac83dcf5b14ce9a671baa4aca9d1c533


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x64.dll
    .dll windows x64

    08c5b4e8b3d7e279da32d10b0d63d540


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x86.dll
    .dll windows x86

    1d8c05c04a8f20d6e22dfd52c5b4ba86


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x64.dll
    .dll windows x64

    2cc392a77685bbbb068ec4f3526e525b


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x86.dll
    .dll windows x86

    c90b1281bafc9431033947b7a9923d14


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x64.dll
    .dll windows x64

    e5857969df34399c4145435fb57c01c3


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x86.dll
    .dll windows x86

    bea7a0e9350143687fe8c144beb45ab8


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x64.dll
    .dll windows x64

    530a21e59982a70053ad157cf5179327


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x86.dll
    .dll windows x86

    4a44c12f60961988c7984aba9ee3786d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x64.dll
    .dll windows x64

    2422904d06a009c161ccd03cda20115c


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x86.dll
    .dll windows x86

    abd738afe96db62bfb8df5fd3e937142


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x64.dll
    .dll windows x64

    36e4d5414001278bb80d1f97ce1be672


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x86.dll
    .dll windows x86

    afa6c44f705069d2018bca61eadff76f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x64.dll
    .dll windows x64

    6f35de51ce0a5d3b8536d2a97ecf2a8d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x86.dll
    .dll windows x86

    47ca254ac9e7c48f14cfc39eb47c484a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x64.dll
    .dll windows x64

    4c2a730e152625f31d76c35b84485f9a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x86.dll
    .dll windows x86

    7005679e99404ca384dba01425a000ab


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x64.dll
    .dll windows x64

    b075bbda511163243f6c78932d52a314


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x86.dll
    .dll windows x86

    7a16fa323a59bec644e1c92890946ae0


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x64.dll
    .dll windows x64

    f656523d0bded13b4a2535f60c388f12


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x86.dll
    .dll windows x86

    f5b0703e510c7a8a6ddc593fb02172a6


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x64.dll
    .dll windows x64

    96451f6bcbc1cd981d3c3690c6a2589f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x86.dll
    .dll windows x86

    a982a0156f78161688814494d07e12ec


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.jar
    .jar
  • data/meterpreter/ext_server_stdapi.php
    .ps1
  • data/meterpreter/ext_server_stdapi.py
    .py .js
  • data/meterpreter/ext_server_stdapi.x64.dll
    .dll windows x64

    fd63c0a48290039784ebb6b5b4c0616d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.x86.dll
    .dll windows x86

    327f19daaa9bfee0f9cc27197fccbf1d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x64.dll
    .dll windows x64

    7266d93370465e3d388f4abe41855b39


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x86.dll
    .dll windows x86

    6e4722a2d72172de112c119c9480172a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x64.dll
    .dll windows x64

    c76bc389fb7e5b56cb8c2b250ac3be3f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x86.dll
    .dll windows x86

    0535f114ca261fa565d7cc03d9869104


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/meterpreter.jar
    .jar
  • data/meterpreter/meterpreter.php
    .ps1
  • data/meterpreter/meterpreter.py
    .sh .js linux
  • data/meterpreter/metsrv.x64.dll
    .dll windows x64

    9a9051067ad471b1d048919084f55c99


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/metsrv.x86.dll
    .dll windows x86

    b369089eef97f01fa6e25e5b6fe83274


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x64.dll
    .dll windows x64

    448cc6134851742b014a9872c79fc4a2


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x86.dll
    .dll windows x86

    2fe88963b5bfb23726c0440e28530088


    Headers

    Imports

    Exports

    Sections

  • lib/metasploit-payloads.rb
  • lib/metasploit-payloads/version.rb
  • metasploit-payloads.gemspec