Overview

overview

10

Static

static

10

f3125002f9...c7.exe

windows7-x64

1

f3125002f9...c7.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3125002f98787e885befa87cae281c8d5f573a30bb4fdfc724eb31c71515ec7

  • Size

    93KB

  • MD5

    fb82318e783f349f265555896d33b732

  • SHA1

    fea516159599c8088044c06d48e105a567c4e3d4

  • SHA256

    f3125002f98787e885befa87cae281c8d5f573a30bb4fdfc724eb31c71515ec7

  • SHA512

    6f3410b020933e85c7196dfa55645ddf3b071727c5496e66e9c450db813d9c4b261a5eeb7c7826e958adbe1cdf83cce7eb9c788dfd52fe9683df4a253ea5d8ec

  • SSDEEP

    1536:bJdWMLHcHhmIKwtVPnZjo2OZxhK1cScSK:bJkML8HhoQVPZjo2O7hKk

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://8.130.30.84:7777/jqueryoZwEoRkjoz-3846123566.9899899.91798989.slim.min.js

Attributes
  • headers Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3125002f98787e885befa87cae281c8d5f573a30bb4fdfc724eb31c71515ec7
    .exe windows:6 windows x86

    6fdb0567ab3b040072af241963aa2b0a


    Headers

    Imports

    Sections