General

  • Target

    2508-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • MD5

    5ad76543129559272fee908c6d5ae492

  • SHA1

    d9c040e693e458a2857f5e88799350b698caa079

  • SHA256

    9c494c62315000a0ad1388edfd24962379a8a706b184022ab82afac0fbe48fec

  • SHA512

    eb09a46b63f59f0402882442691446f0f0651bb712aec804c1877c9f842e004dbf687ad6d2d289c4807939c1778b9f2b51fb3b2378714e9544338040e7c7b348

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://146.190.120.217:8001/bU9l

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Signatures

Files

  • 2508-0-0x0000000000020000-0x0000000000021000-memory.dmp