General

  • Target

    f22b555bc5525f0d3dcb9c38908afaeeb9cb9e35d7f07688be0e54ba208b546d

  • Size

    6KB

  • MD5

    bb266044e251951b8057301adecc08f4

  • SHA1

    182c8c4b653464c4910305d38bce42db13fba951

  • SHA256

    f22b555bc5525f0d3dcb9c38908afaeeb9cb9e35d7f07688be0e54ba208b546d

  • SHA512

    1c5cd9b1e7080ca81c2339663ed881620ed5f29ddddf0ecfc5bff6768cf4cb9a0f0d808d8ef3d99a0e7d1742b3ee750a6f1127f3497912701b4df7836a6b793e

  • SSDEEP

    96:cjm2fnyg6IW2q7fbq4t77k6eHlzRpYuS:h2fnqID2e4lNeH5r0

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://154.204.58.234:443/jquery-3.3.1.slim.min.js

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f22b555bc5525f0d3dcb9c38908afaeeb9cb9e35d7f07688be0e54ba208b546d
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections