Overview

overview

10

Static

static

10

c124967d72...08.exe

windows7-x64

1

c124967d72...08.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c124967d726676714484f1c838351fc4f9c836259f153312eb5a8cc04538d308

  • Size

    1.4MB

  • MD5

    4ee05f4475107b783215ed70e23746be

  • SHA1

    24af6560cbb70942f5d8eaf29eff7a73fcc6b599

  • SHA256

    c124967d726676714484f1c838351fc4f9c836259f153312eb5a8cc04538d308

  • SHA512

    a2bc6513dd05767607a420050c3513d2c87d56774adf9865b969e72309060171399b5486c95bc70dfd1920b03ded4f898cabd5d7c529b7153ed7f060f691941e

  • SSDEEP

    24576:ZbbfsZ2l5h15n4UoY0YUEIM4wUo8EI8Ip75Ltv8UIwUc668jrP+w0/O1QZbq:drM2lfS8j6xF

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://op.za1n.top:21443/jquery-3.3.1.slim.min.js

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c124967d726676714484f1c838351fc4f9c836259f153312eb5a8cc04538d308
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections