Overview

overview

10

Static

static

10

webɨ��...Vw.dll

windows7-x64

webɨ��...Vw.dll

windows10-2004-x64

webɨ��...ed.exe

windows7-x64

webɨ��...ed.exe

windows10-2004-x64

webɨ��...��.exe

windows7-x64

webɨ��...��.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ce4a54054f46b779e57efe626bdf09934f7131634a4b072efbfb2a3cc665bc5

  • Size

    829KB

  • MD5

    4e06375eab07f84dbb43df1d8b036f0e

  • SHA1

    2f371336c4c5d460151f9b1217a4c7e859513817

  • SHA256

    0ce4a54054f46b779e57efe626bdf09934f7131634a4b072efbfb2a3cc665bc5

  • SHA512

    a71a8276ced073b2de2762d5b548e4d598bfb3d8f87ed5b7d2767569a3ce1193a9850605ed61bc1a3aa20f41bb8c6980b0064323e2b0f43390687050cc61949e

  • SSDEEP

    24576:X6T56P7zY0yzku5tCP3YPKOWT5UanW6Mb6zki:A8zmQuPCP3YxMua25i

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

112.74.105.11:1438

Signatures

Files

  • 0ce4a54054f46b779e57efe626bdf09934f7131634a4b072efbfb2a3cc665bc5
    .zip
  • webɨ����/Interop.SHDocVw.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • webɨ����/WebCruiser20220804.log
  • webɨ����/WebCruiser20220805.log
  • webɨ����/WebCruiser20220806.log
  • webɨ����/WebCruiserWVS.Patched.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • webɨ����/WebCruise���İ�.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • webɨ����/combo.txt
  • webɨ����/password.txt
  • webɨ����/username.txt