Overview

overview

10

Static

static

10

65c816c53d...AS.dll

windows7-x64

10

65c816c53d...AS.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65c816c53d5eec5a81943dc8f85438e0_NEAS

  • Size

    71KB

  • MD5

    65c816c53d5eec5a81943dc8f85438e0

  • SHA1

    04fda9ab373601414cc8fb2e1ab5e3a2e3dbf479

  • SHA256

    d76a2824cfcebaef3570f7b550a0db589bf6081791e670f662986b32d503ab67

  • SHA512

    a9efa1e11deec2d6ebecb874b6f4ae7c371d20b5bea5d45913160163bfdb1fef107f6f6f2c6dcd5d05a955b9c6167b08dd90282b7230ed4f2e5cc3dede1d6eff

  • SSDEEP

    1536:Gu6/DnP63PLsm7CQAoQ3C7Pe7XdEfiHvZZgsWccd7l7F+WI8Y:w/WHuKQ3C7tfivjc7CWI8Y

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://1.117.230.165:5963/Ki6r

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 65c816c53d5eec5a81943dc8f85438e0_NEAS
    .dll windows:6 windows x86 arch:x86

    eb1113f6420fddcd48801d0d3f7a7d17


    Headers

    Imports

    Exports

    Sections