Overview

overview

10

Static

static

10

run.ps1

windows7-x64

8

run.ps1

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    run.ps1

  • Size

    3KB

  • MD5

    e07dc3ac68e7bfb5386fdfa2b1b4d4fc

  • SHA1

    876c3029e672d80b034d872bd12f2caa702ecbb0

  • SHA256

    6f6408184ce239352d2600c9ef0d7d093997f7a6fb62266263b6cd687bc2b9c0

  • SHA512

    9daf06f6db0e7782e95963c2e96629726d17c8240da287e7171bf99cfd398ca4b9404421ad0b12731b820eb8a8a2b52f898d90e16cc12aefcc320d6ef486d15a

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://195.211.98.91:80/map/v8.80/JavaScript

Attributes
  • headers Accept: application/xhtml+xml, application/xml, application/json Accept-Language: el Accept-Encoding: *, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36

Signatures

Files

  • run.ps1
    .ps1