General

  • Target

    2e1fcc22ce7b7279cce11e28575dd73805e5683287c57a785c8d14c0ede93ea5

  • Size

    9KB

  • MD5

    1bf7e9f6ad372ccd2a546fa6b4144d91

  • SHA1

    aa0825afad1689116dc4166e2c489d44dffc514b

  • SHA256

    2e1fcc22ce7b7279cce11e28575dd73805e5683287c57a785c8d14c0ede93ea5

  • SHA512

    d0cfc75e0224f5b1d820ba0ec572d283f6725ea805ec40b94aa4b98496e3ad96cf347aed33b76cd78c3f88e8ecc4014ea593628c3f70f931f99c6dab0a6e4c57

  • SSDEEP

    192:aS4OQTA7qWJrjjOWIQ/27E5pz6fMTU+TGtQ:6TA/Jnjg7aDv

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.7.130:3388/J2jv

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; MASP)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e1fcc22ce7b7279cce11e28575dd73805e5683287c57a785c8d14c0ede93ea5
    .exe windows x86

    915e9ffd7926e5faea15041daa79f3ab


    Headers

    Imports

    Sections