General

  • Target

    6ba231293a2d41fd1b2e7280d6cb9496acd79ce213df87456c2d66815241392b

  • Size

    62KB

  • MD5

    4e384405499275eaaf79cf1fb4c65b85

  • SHA1

    7b2f24c2f9b2c89c311168c828b443fdf1860ecc

  • SHA256

    6ba231293a2d41fd1b2e7280d6cb9496acd79ce213df87456c2d66815241392b

  • SHA512

    0382e544c1899d5edd6f2d12524e26470674a85db34f3c0d6c7c5b88cb94c91e4703197b25d2c53476a454bc93eb37fe0962a6c4e33c5baf678f496709be6b78

  • SSDEEP

    384:wg1argYHjdQhLWwFeTR4HyJUNwpO9I6CGrw6wCHXnc8EzpQfBkIj3tA89Xu:YrPjT9kyXpqVdXncdzwBkGA89

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://vpn.micr0soft.store:443/jquery-3.3.1.slim.min.js

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ba231293a2d41fd1b2e7280d6cb9496acd79ce213df87456c2d66815241392b
    .exe windows:6 windows x64 arch:x64

    b6db43c9e2f5103da8734b1389edfd6c


    Headers

    Imports

    Sections