General

  • Target

    7ba7d11ece7e85cb9f0978678d74ddeb5bf57c1660df5a149937403a602a7f5d

  • Size

    11.7MB

  • MD5

    7b7447e70e6b0d783f78502902177c6f

  • SHA1

    6a8d7425ba51458ce3b2121ab0c61e397749feeb

  • SHA256

    7ba7d11ece7e85cb9f0978678d74ddeb5bf57c1660df5a149937403a602a7f5d

  • SHA512

    b22d3928f26fcbd09948ab2fa4ee59959095e6369f7bde742a81a1c6c6fd7f79038cb238c94e27421fa9c06247571b4a93eb316bddbf9d7d86160ed228bf733f

  • SSDEEP

    196608:trCQPyBqK8Jn/RmSgKz84j41mvi18m5Fn3mMLBjnP/BbwjWWUZGIyk7MUWf:1eq/npHgZ318U/FsTUoIyk7r

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 2 IoCs

Files

  • 7ba7d11ece7e85cb9f0978678d74ddeb5bf57c1660df5a149937403a602a7f5d
    .tar
  • checksums.yaml.gz
    .gz
  • checksums.yaml
  • checksums.yaml.gz.sig
  • data.tar.gz
    .gz
  • data.tar
    .tar
  • .gitignore
  • CONTRIBUTING.md
  • Gemfile
  • LICENSE
  • README.md
  • Rakefile
  • data/android/apk/AndroidManifest.xml
  • data/android/apk/classes.dex
    .dex
  • data/android/apk/resources.arsc
  • data/android/meterpreter.dex
    .dex
  • data/android/meterpreter.jar
    .apk android
  • data/android/metstage.jar
    .apk android
  • data/android/shell.jar
    .apk android
  • data/java/com/metasploit/meterpreter/MemoryBufferURLConnection.class
  • data/java/com/metasploit/meterpreter/MemoryBufferURLStreamHandler.class
  • data/java/javapayload/stage/Meterpreter.class
  • data/java/javapayload/stage/Shell.class
  • data/java/javapayload/stage/Stage.class
  • data/java/javapayload/stage/StreamForwarder.class
  • data/java/metasploit/AESEncryption.class
  • data/java/metasploit/JMXPayload.class
  • data/java/metasploit/JMXPayloadMBean.class
  • data/java/metasploit/Payload.class
  • data/java/metasploit/PayloadServlet.class
  • data/java/metasploit/PayloadTrustManager.class
  • data/java/metasploit/RMILoader.class
  • data/java/metasploit/RMIPayload.class
  • data/meterpreter/elevator.x64.dll
    .dll windows x64

    db30ab1188e9f9fd120bcbcaad845d09


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/elevator.x86.dll
    .dll windows x86

    ac83dcf5b14ce9a671baa4aca9d1c533


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x64.dll
    .dll windows x64

    08c5b4e8b3d7e279da32d10b0d63d540


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x86.dll
    .dll windows x86

    1d8c05c04a8f20d6e22dfd52c5b4ba86


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x64.dll
    .dll windows x64

    2cc392a77685bbbb068ec4f3526e525b


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x86.dll
    .dll windows x86

    c90b1281bafc9431033947b7a9923d14


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x64.dll
    .dll windows x64

    e5857969df34399c4145435fb57c01c3


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x86.dll
    .dll windows x86

    bea7a0e9350143687fe8c144beb45ab8


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x64.dll
    .dll windows x64

    530a21e59982a70053ad157cf5179327


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x86.dll
    .dll windows x86

    4a44c12f60961988c7984aba9ee3786d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x64.dll
    .dll windows x64

    2422904d06a009c161ccd03cda20115c


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x86.dll
    .dll windows x86

    abd738afe96db62bfb8df5fd3e937142


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x64.dll
    .dll windows x64

    36e4d5414001278bb80d1f97ce1be672


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x86.dll
    .dll windows x86

    afa6c44f705069d2018bca61eadff76f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x64.dll
    .dll windows x64

    6f35de51ce0a5d3b8536d2a97ecf2a8d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x86.dll
    .dll windows x86

    47ca254ac9e7c48f14cfc39eb47c484a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x64.dll
    .dll windows x64

    4c2a730e152625f31d76c35b84485f9a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x86.dll
    .dll windows x86

    7005679e99404ca384dba01425a000ab


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x64.dll
    .dll windows x64

    b075bbda511163243f6c78932d52a314


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x86.dll
    .dll windows x86

    7a16fa323a59bec644e1c92890946ae0


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x64.dll
    .dll windows x64

    f656523d0bded13b4a2535f60c388f12


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x86.dll
    .dll windows x86

    f5b0703e510c7a8a6ddc593fb02172a6


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x64.dll
    .dll windows x64

    96451f6bcbc1cd981d3c3690c6a2589f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x86.dll
    .dll windows x86

    a982a0156f78161688814494d07e12ec


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.jar
    .jar
  • data/meterpreter/ext_server_stdapi.php
    .ps1
  • data/meterpreter/ext_server_stdapi.py
    .py .js
  • data/meterpreter/ext_server_stdapi.x64.dll
    .dll windows x64

    fd63c0a48290039784ebb6b5b4c0616d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.x86.dll
    .dll windows x86

    327f19daaa9bfee0f9cc27197fccbf1d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x64.dll
    .dll windows x64

    7266d93370465e3d388f4abe41855b39


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x86.dll
    .dll windows x86

    6e4722a2d72172de112c119c9480172a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x64.dll
    .dll windows x64

    c76bc389fb7e5b56cb8c2b250ac3be3f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x86.dll
    .dll windows x86

    0535f114ca261fa565d7cc03d9869104


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/meterpreter.jar
    .jar
  • data/meterpreter/meterpreter.php
    .ps1
  • data/meterpreter/meterpreter.py
    .sh .js linux
  • data/meterpreter/metsrv.x64.dll
    .dll windows x64

    9a9051067ad471b1d048919084f55c99


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/metsrv.x86.dll
    .dll windows x86

    b369089eef97f01fa6e25e5b6fe83274


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x64.dll
    .dll windows x64

    448cc6134851742b014a9872c79fc4a2


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x86.dll
    .dll windows x86

    2fe88963b5bfb23726c0440e28530088


    Headers

    Imports

    Exports

    Sections

  • lib/metasploit-payloads.rb
  • lib/metasploit-payloads/version.rb
  • metasploit-payloads.gemspec
  • data.tar.gz.sig
  • metadata.gz
    .gz
  • metadata.gz.sig