General

  • Target

    1fce3f6211996da0e3be88ffda9d78eeedf0acf7b55fbe67c52fd5764845110d

  • Size

    22.6MB

  • MD5

    db1e4de4506e9a1fc779679e8db72ed5

  • SHA1

    ac2dd4b5a84ee2107d4a3bc002ad50cf5948692e

  • SHA256

    1fce3f6211996da0e3be88ffda9d78eeedf0acf7b55fbe67c52fd5764845110d

  • SHA512

    60c2ec1b646f23bd83beac2b97ad481013d1bc5232d0038f09c957b9c796fa790b7835449ab23141dfd0305dd7141a687a6b443203b6af6a5ff47e21c3218b3c

  • SSDEEP

    196608:QDAkq0KVgpC31JiZJVBW9SuU+pzDcNDw0YPE933QEzDcNDwma1+Bj6z:QDAkvKii1JiZJVBek+r0kZqmIsj6z

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 3 IoCs

Files

  • 1fce3f6211996da0e3be88ffda9d78eeedf0acf7b55fbe67c52fd5764845110d
    .tar
  • .gitignore
  • CONTRIBUTING.md
  • Gemfile
  • LICENSE
  • README.md
  • Rakefile
  • data/android/apk/AndroidManifest.xml
  • data/android/apk/classes.dex
    .dex
  • data/android/apk/resources.arsc
  • data/android/meterpreter.dex
    .dex
  • data/android/meterpreter.jar
    .apk android
  • data/android/metstage.jar
    .apk android
  • data/android/shell.jar
    .apk android
  • data/java/com/metasploit/meterpreter/MemoryBufferURLConnection.class
  • data/java/com/metasploit/meterpreter/MemoryBufferURLStreamHandler.class
  • data/java/javapayload/stage/Meterpreter.class
  • data/java/javapayload/stage/Shell.class
  • data/java/javapayload/stage/Stage.class
  • data/java/javapayload/stage/StreamForwarder.class
  • data/java/metasploit/AESEncryption.class
  • data/java/metasploit/JMXPayload.class
  • data/java/metasploit/JMXPayloadMBean.class
  • data/java/metasploit/Payload.class
  • data/java/metasploit/PayloadServlet.class
  • data/java/metasploit/PayloadTrustManager.class
  • data/java/metasploit/RMILoader.class
  • data/java/metasploit/RMIPayload.class
  • data/meterpreter/elevator.x64.dll
    .dll windows x64

    db30ab1188e9f9fd120bcbcaad845d09


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/elevator.x86.dll
    .dll windows x86

    ac83dcf5b14ce9a671baa4aca9d1c533


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x64.dll
    .dll windows x64

    43ac3f19cbd6ba7b1f49b0638031b48e


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_espia.x86.dll
    .dll windows x86

    44ae278dfff840f88053696878215bc0


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x64.dll
    .dll windows x64

    2cc392a77685bbbb068ec4f3526e525b


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_extapi.x86.dll
    .dll windows x86

    c90b1281bafc9431033947b7a9923d14


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x64.dll
    .dll windows x64

    e5857969df34399c4145435fb57c01c3


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_incognito.x86.dll
    .dll windows x86

    bea7a0e9350143687fe8c144beb45ab8


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x64.dll
    .dll windows x64

    2b3b904a1b1a360b097de23ce06ffed5


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_kiwi.x86.dll
    .dll windows x86

    9d2170c79335ea9fc6949d68a8834651


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x64.dll
    .dll windows x64

    2422904d06a009c161ccd03cda20115c


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_lanattacks.x86.dll
    .dll windows x86

    abd738afe96db62bfb8df5fd3e937142


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x64.dll
    .dll windows x64

    36e4d5414001278bb80d1f97ce1be672


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_mimikatz.x86.dll
    .dll windows x86

    afa6c44f705069d2018bca61eadff76f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x64.dll
    .dll windows x64

    6f35de51ce0a5d3b8536d2a97ecf2a8d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_peinjector.x86.dll
    .dll windows x86

    47ca254ac9e7c48f14cfc39eb47c484a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x64.dll
    .dll windows x64

    4c2a730e152625f31d76c35b84485f9a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_powershell.x86.dll
    .dll windows x86

    7005679e99404ca384dba01425a000ab


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x64.dll
    .dll windows x64

    b075bbda511163243f6c78932d52a314


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_priv.x86.dll
    .dll windows x86

    7a16fa323a59bec644e1c92890946ae0


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x64.dll
    .dll windows x64

    f656523d0bded13b4a2535f60c388f12


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_python.x86.dll
    .dll windows x86

    f5b0703e510c7a8a6ddc593fb02172a6


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x64.dll
    .dll windows x64

    96451f6bcbc1cd981d3c3690c6a2589f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_sniffer.x86.dll
    .dll windows x86

    a982a0156f78161688814494d07e12ec


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.jar
    .jar
  • data/meterpreter/ext_server_stdapi.php
    .ps1
  • data/meterpreter/ext_server_stdapi.py
    .py .js
  • data/meterpreter/ext_server_stdapi.x64.dll
    .dll windows x64

    fd63c0a48290039784ebb6b5b4c0616d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_stdapi.x86.dll
    .dll windows x86

    327f19daaa9bfee0f9cc27197fccbf1d


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x64.dll
    .dll windows x64

    7266d93370465e3d388f4abe41855b39


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_unhook.x86.dll
    .dll windows x86

    6e4722a2d72172de112c119c9480172a


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x64.dll
    .dll windows x64

    c76bc389fb7e5b56cb8c2b250ac3be3f


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/ext_server_winpmem.x86.dll
    .dll windows x86

    0535f114ca261fa565d7cc03d9869104


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/meterpreter.jar
    .jar
  • data/meterpreter/meterpreter.php
    .ps1
  • data/meterpreter/meterpreter.py
    .sh .js linux
  • data/meterpreter/metsrv.x64.dll
    .dll windows x64

    9a9051067ad471b1d048919084f55c99


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/metsrv.x86.dll
    .dll windows x86

    b369089eef97f01fa6e25e5b6fe83274


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x64.dll
    .dll windows x64

    448cc6134851742b014a9872c79fc4a2


    Headers

    Imports

    Exports

    Sections

  • data/meterpreter/screenshot.x86.dll
    .dll windows x86

    2fe88963b5bfb23726c0440e28530088


    Headers

    Imports

    Exports

    Sections

  • lib/metasploit-payloads.rb
  • lib/metasploit-payloads/version.rb
  • metasploit-payloads.gemspec