General

  • Target

    51a3b0c432567d37de7aafbcacb043010fb1f9fb5020722fe4d5369026c16d96

  • Size

    5KB

  • MD5

    5f2ad09a1b18cd25f76ed9f12ab66860

  • SHA1

    ee28ddd2f8f728589b51572599253f000f05c38b

  • SHA256

    51a3b0c432567d37de7aafbcacb043010fb1f9fb5020722fe4d5369026c16d96

  • SHA512

    f59a777937f2a8eb44c087f38250b2b6003b2a00b9ae1caf2e84d45ea88422f2b3810103cb0f8f1632eb589fb2cbc13e1bd3447c39b0e606df046e8fea036a60

  • SSDEEP

    96:dZAXs8ZnvIZBOaU7RqiT9lDH9Az3Nbo4GXk:SnvwLU713DmJbo4h

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.10.174:6666/tTJJ

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSCOM)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51a3b0c432567d37de7aafbcacb043010fb1f9fb5020722fe4d5369026c16d96
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections