General

  • Target

    ae6de73ce410d903852350fd5f5e325c84b9de080c5865e436da3d34fb7a0c3d.exe

  • Size

    40KB

  • MD5

    af1ac4c55c7364183b335e64933d92f0

  • SHA1

    cb623a4f249a61965e623acd899f808f2fa6c4bc

  • SHA256

    ae6de73ce410d903852350fd5f5e325c84b9de080c5865e436da3d34fb7a0c3d

  • SHA512

    3ad568852dc8f66757c8db81f8a6ce00c7a9a32e6ebd983e181d06b4ef280615aae9187996fd5865063de2c29f5efce656c8b9789939fcb71fe254e83334789d

  • SSDEEP

    768:mje7buAaW43mILW8wI823haBRh3xwPIps+MxnRFsPUElRRIzERh:EwbuA9ILNwMheRhuPIpMxnReP5RQERh

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.110.138:1111/Kdv7

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae6de73ce410d903852350fd5f5e325c84b9de080c5865e436da3d34fb7a0c3d.exe
    .exe windows:6 windows x64 arch:x64

    b588036b5202b7426cd84298c3decc62


    Headers

    Imports

    Exports

    Sections