Overview

overview

10

Static

static

10

de64f766c5...eb.dll

windows7-x64

10

de64f766c5...eb.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07ec066e55624b529b44cb22a81d7909ef12b18b45414cee22a9bc467a94ef1b

  • Size

    40KB

  • MD5

    f2a590ede2edbe08bb4f99eca0424b2b

  • SHA1

    d4fe4e37dab1fe0b562920fc350b2f5133a37847

  • SHA256

    07ec066e55624b529b44cb22a81d7909ef12b18b45414cee22a9bc467a94ef1b

  • SHA512

    0f379cf2d73afa13e47a917e9752736b9c11c3cf5a17e33af63a1b2c87c92659134e2717a1e67503961e52d0a7176ab64000e5d508f55b9b7835711a434cc168

  • SSDEEP

    768:4IVkJD7tmkB2N3XUYkowqPiInNnZyvLGl94TdU376p7e+hIMRauCMkOIQJ:4IVa7Ik0N3X2ovP3nNnayl9mU376dPF9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://90aaaeb62492.ngrok.io:80/Th2n

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 07ec066e55624b529b44cb22a81d7909ef12b18b45414cee22a9bc467a94ef1b
    .zip

    Password: infected

  • de64f766c5148db03d216ee7b88ba1ab51b74e4b34aa6ef7315882d0881c71eb
    .dll windows:6 windows x86 arch:x86

    518e4b695fcab1626f5dac3933aca0b8


    Headers

    Imports

    Sections