General

  • Target

    19a15781c482f43bd7e9928631953d03f215a47612215311ec1ed9741a14cfaf

  • Size

    12KB

  • MD5

    4be0f3f0dcc0867c315b61ce4f36fc3e

  • SHA1

    c123ad6dbdaa2436551eeb0df5dd8ac194555e79

  • SHA256

    19a15781c482f43bd7e9928631953d03f215a47612215311ec1ed9741a14cfaf

  • SHA512

    0c162210aa22bf928133a2545bcb7edfa78503135a618dbeb0e761c5bc26f67deccbd55e9890012be07893132262889ce746331d6fd81047c1ae95ec862a474d

  • SSDEEP

    192:UfDawBhMHDld3M3oQ3Aw0N3hKSZDXNxRaaKay9TYl58csLFcMW:UfDJ3P35OfR0dTYlwF0

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://154.204.58.234:443/jquery-3.3.1.slim.min.js

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19a15781c482f43bd7e9928631953d03f215a47612215311ec1ed9741a14cfaf
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections