General

  • Target

    b0a6164df1232fb16fd3af1728c2479f51b9adcd71ffbfb6ac54bac6bbc0ca76

  • Size

    5KB

  • MD5

    28790e2ee7fb2492415a7b8042a843e5

  • SHA1

    67b06103763d3eee755bf58b197b258d60af9599

  • SHA256

    b0a6164df1232fb16fd3af1728c2479f51b9adcd71ffbfb6ac54bac6bbc0ca76

  • SHA512

    7f0efa1e463c26744d68f10e768c04685aad8729a613b03c0460d17c079e5363f1152a89b1c2882f429ccc087c36ded99f5372755fc3c6e9d423f57d2bbf3622

  • SSDEEP

    96:tZAXs8ZnvIZBOaU7RqiT9lDH9A0rr3fbo4GXk:CnvwLU713Dm0rzbo4h

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.10.174:6666/tTJJ

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSCOM)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0a6164df1232fb16fd3af1728c2479f51b9adcd71ffbfb6ac54bac6bbc0ca76
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections