General
-
Target
word.cab
-
Size
8KB
-
MD5
458c6cd35278f5bc75e87f2590e3c9e3
-
SHA1
61d77f3fb254adbb50ec69f09b80718085737b26
-
SHA256
16c6d7fe6eab2f2b9c1cd50eb36e5bb0b09d2ccf69af5788e18a54f18874bd9b
-
SHA512
a73f5f2627ae920619363af877b0d2b95672ae89738aa6cc5adc0d9236241becbcb6f0cc222956ff03c21573c63a9a89a87da5f67b8d365d1a629c5f34006951
-
SSDEEP
48:eqld+P3zSSxPIux486DhFhklWqJ1ATdBQuDZlC56a9AzFP64f:dvSx335JORB9ExApP
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/reverse_http
C2
http://192.168.112.128:443/Trm_QWz3GPappqinyPBTDAOxLMPI7CwRRbG_kq75ly-doSnMd8_TO7XOjwBsLa-2x2Vv9clN0MQNLfLsND_P0ziGEfZrfiTqI0wWj8FCoj7zqH8xruH6QilPzwW20pALpJn6fxVcn-hx2IhJQ8LhFiD4HuXR4
Signatures
-
Metasploit family
Files
-
word.cab.cab