General

  • Target

    2856-20-0x00000000052B0000-0x00000000052B1000-memory.dmp

  • Size

    4KB

  • MD5

    daea793115464c393a80fe81500e3d6a

  • SHA1

    a2838768a4d21d10e9b2910d79e1ea99d8044a75

  • SHA256

    bcd81b5562718409a5322c450ca74753844cbdc2706ca89270d34195a536290f

  • SHA512

    23ad717899028fd4b7513b52238781436edb4dd497d182f8f5c9a2e70722c6ebd1aa59b8d6432177b2896ea483e140ebc0b3e92bb4f4a631c3a7324238d5feb3

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://45.227.253.62:33231/aX5n

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)

Signatures

Files

  • 2856-20-0x00000000052B0000-0x00000000052B1000-memory.dmp