General

  • Target

    f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145

  • Size

    27KB

  • MD5

    02061b49edafff8a4d1b794e21be3b87

  • SHA1

    f5dc846c5f9f2d171d2aca188377e2e439787b77

  • SHA256

    f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145

  • SHA512

    2b52dceaf565bea7da025982c558c6da71c40d0de5c3e30f1762e4c824a29561a306bf6f8e4c2acc03b5991a01e8b0c1538df0e34184645686d4a0e1a273d417

  • SSDEEP

    768:6TZi3u79UotAXZP9CZuZwkMgr8QX0RmlJvH3:6TTUotGZGuekMgQQX0RmlRH

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.16.129:80/HtNR

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; ASU2JS)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2922a4e331acd5f567f30fa41a8fa06986b22c81c833c177ab4a7d434cd9145
    .exe windows:6 windows x86

    4be4003ed431a03f8c55ada312720ac0


    Headers

    Imports

    Sections