Overview

overview

10

Static

static

10

6f6408184c...c0.ps1

windows7-x64

10

6f6408184c...c0.ps1

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e07dc3ac68e7bfb5386fdfa2b1b4d4fc.bin

  • Size

    2KB

  • MD5

    a3a4260da147dde23badff156f283411

  • SHA1

    415cf5e644a242c3df45f4e279bf15e5d4ce8fd8

  • SHA256

    7aab5a4b97b90f7a30793aa09f89ddcd24ee8aaf02dd6ec23f3f643dbcd33187

  • SHA512

    b3844b0c0a9ff894e36e50961e592a090f094f7ff70cd963d8380388dcf3751d449a4f5fe06e78c26419f437a81370960552a8365c87a9f50752b17ab9e38be2

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://195.211.98.91:80/map/v8.80/JavaScript

Attributes
  • headers Accept: application/xhtml+xml, application/xml, application/json Accept-Language: el Accept-Encoding: *, compress User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36

Signatures

Files

  • e07dc3ac68e7bfb5386fdfa2b1b4d4fc.bin
    .zip

    Password: infected

  • 6f6408184ce239352d2600c9ef0d7d093997f7a6fb62266263b6cd687bc2b9c0.ps1
    .ps1