Overview

overview

10

Static

static

10

bfd66850d0...83.exe

windows7-x64

10

bfd66850d0...83.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bfd66850d0f939535cbac32dcb177dd9b3b734baef4ffd6de0bdaed506a8ed83

  • Size

    53KB

  • MD5

    14cfb7cd14cdff8f01005b9f77ebdd44

  • SHA1

    1298678103b5df08ba9cced02e3690edf6557285

  • SHA256

    bfd66850d0f939535cbac32dcb177dd9b3b734baef4ffd6de0bdaed506a8ed83

  • SHA512

    a19d7fd25ad9868fc7ab49779302c0b42fa114750790752692201d1c769c54130352b9bf4bc412e177974b19707d80a7c57faa7ce042896d85f1da3488f72f97

  • SSDEEP

    1536:RoQ8RkFkm6eI2H/WULCOwHEN8EAG2mAa5:RX8RMp6eI2H05EN8hmL5

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://service-df4qfdu2-1317550018.gz.apigw.tencentcs.com:80/vue.min.js

Attributes
  • headers User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfd66850d0f939535cbac32dcb177dd9b3b734baef4ffd6de0bdaed506a8ed83
    .exe windows:5 windows x64

    f46a388fb8883c21735356560db9ba42


    Headers

    Imports

    Sections