General

  • Target

    c6a7b7c1917984fed22255dd68aeb8996a941e2a6d2df85d951af2143466a0f6

  • Size

    955KB

  • MD5

    7a6a9dc2187243e5fdbb0390f33d5c43

  • SHA1

    d979184d4a110da53db01433fc1d4a97837b2d43

  • SHA256

    c6a7b7c1917984fed22255dd68aeb8996a941e2a6d2df85d951af2143466a0f6

  • SHA512

    c15fa246742b180a16ad85d90462f645e2a863d1466822c19545880651250a18866a4542aa8e7e3718f15834b5cb178301a2c10a85711be3f78a172bf36e92f2

  • SSDEEP

    12288:t1Akk7UJ0rVwjUqLA8oR2EzK5Y+5cjcxoTkmTGhwPn:XAhCUqLAXR2EzK5j5cEowEGhK

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://47.96.116.171:8088/ByIX

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6a7b7c1917984fed22255dd68aeb8996a941e2a6d2df85d951af2143466a0f6
    .exe windows:4 windows x86

    003092d2a81431e9f28eb00e4e91c89c


    Headers

    Imports

    Sections