General

  • Target

    8da20b8fbd330f94fb0afc4e37c47c7c71cced0be550865cdb6d14373f71e148

  • Size

    24KB

  • MD5

    cecf50600e97830953189ee186c6ea11

  • SHA1

    74faedd68b829afbe6f6709e79e3cd048a7361f1

  • SHA256

    8da20b8fbd330f94fb0afc4e37c47c7c71cced0be550865cdb6d14373f71e148

  • SHA512

    81e71a1943290ed15b1a954bee2d212d495b4b6de1726897ffbfe5f558e19221b8fc559f255977c49eb83874c76aea210f4a02d54f231f9d6603e1c17f462e2f

  • SSDEEP

    384:/jdRDrqU1UDjJSvzsDPuKOE6Ih0HwSoWxtwofiQHQG50at:/jGUECoDLROHwSliQH4o

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.234.130:6000/icon1.png

Attributes
  • headers Host: bing.com Accept: application/xml;q=0.9,image/avif,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 Cookie: token=TYGAelr7Vs8pYUEdf0pAKVf6BcqFCOPB;BIGipServerpool_9.29_5229=3314783417.22012.0000 User-Agent: Microsoft-CryptoAPI/10.0

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8da20b8fbd330f94fb0afc4e37c47c7c71cced0be550865cdb6d14373f71e148
    .dll windows x86

    d8d8a672d7115bbc81d1982cfa2c999a


    Headers

    Imports

    Exports

    Sections