General

  • Target

    word.cab

  • Size

    8KB

  • MD5

    458c6cd35278f5bc75e87f2590e3c9e3

  • SHA1

    61d77f3fb254adbb50ec69f09b80718085737b26

  • SHA256

    16c6d7fe6eab2f2b9c1cd50eb36e5bb0b09d2ccf69af5788e18a54f18874bd9b

  • SHA512

    a73f5f2627ae920619363af877b0d2b95672ae89738aa6cc5adc0d9236241becbcb6f0cc222956ff03c21573c63a9a89a87da5f67b8d365d1a629c5f34006951

  • SSDEEP

    48:eqld+P3zSSxPIux486DhFhklWqJ1ATdBQuDZlC56a9AzFP64f:dvSx335JORB9ExApP

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://192.168.112.128:443/Trm_QWz3GPappqinyPBTDAOxLMPI7CwRRbG_kq75ly-doSnMd8_TO7XOjwBsLa-2x2Vv9clN0MQNLfLsND_P0ziGEfZrfiTqI0wWj8FCoj7zqH8xruH6QilPzwW20pALpJn6fxVcn-hx2IhJQ8LhFiD4HuXR4

Signatures

Files

  • word.cab
    .cab