General

  • Target

    f024c8ef193a8b4e669f63678a597f09e3fbb5075aef32fd195a3e9087bd8cd1

  • Size

    79KB

  • MD5

    44670170cb48d73c83eff9e84792f7ba

  • SHA1

    9798b104877a61420ee0a587a96c91c5d5c57c21

  • SHA256

    f024c8ef193a8b4e669f63678a597f09e3fbb5075aef32fd195a3e9087bd8cd1

  • SHA512

    dd67c6cff4fc6aeb451d8f0f82132a10220982eb3b9748b3f5e1b70b13abfb517723219d1d4c61f165dfe55962ae58a820b1d19fc74ced3fb404a04317144453

  • SSDEEP

    768:JyqvhnQXTtpYIt9Jmyyqagq3rOCtwIyTCbxEknIu0RSyw4mS:JbmzYByZagqvtwIyTCbtnF8qS

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://47.99.129.229:8888/ipR1

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f024c8ef193a8b4e669f63678a597f09e3fbb5075aef32fd195a3e9087bd8cd1
    .dll windows:4 windows x86

    d67554e83d11af66affca51e11094cbd


    Headers

    Imports

    Exports

    Sections