General

  • Target

    24.144.108.207-32.ps1

  • Size

    3KB

  • MD5

    1ab29ab01b525c971ba8f712c8c4027a

  • SHA1

    5c4823be437cc302af4d7495e35274ef3979f4c6

  • SHA256

    90be66574b73523f1a3f43e2768f482ffc7c3689641bd620bb03ec791abbf5a2

  • SHA512

    1a46e323153933d9a1dfc1d3a6ead30ad6b6ab371d104d0e0a08acd667f9d45261c1a9159eb3750be9c9f82dc77badb29acc1f8b22faf5b2bd88aa09a8f87ff4

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://24.144.108.207:8080/r9Fk

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.4.1263.203; Windows NT 6.1; WOW64; Trident/5.0)

Signatures

Files

  • 24.144.108.207-32.ps1
    .ps1