General

  • Target

    1b02aeadccdd83b9f6271674634b42a4319b4e8aebee40542abbcf4cce41c4b1

  • Size

    30KB

  • MD5

    def9810fe38316d6662870941d65b4e2

  • SHA1

    3eccaf0eb4939c06bb9e0b9cfbbc460be7806c48

  • SHA256

    1b02aeadccdd83b9f6271674634b42a4319b4e8aebee40542abbcf4cce41c4b1

  • SHA512

    803ced921f143dcbbf2a4f02775ea9360433dad2518917a21a74000dd6fdedb7bf4d4f5232e408e970cfab57f2b1ff9061b80d02fea0cc42e38c12085d433570

  • SSDEEP

    768:OLp5rE4G83yPdtAXZP9CZuZwkMgr8QX0RmlJvH:05fQPdtGZGuekMgQQX0RmlRH

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.16.129:80/u6Dm

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSCOM)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1b02aeadccdd83b9f6271674634b42a4319b4e8aebee40542abbcf4cce41c4b1
    .exe windows:6 windows x64

    422940d4003f0b4294da91697d88ab6a


    Headers

    Imports

    Sections