General

  • Target

    67e7b3a24b4cbb0e119a41877398fa850bfc84d0aa516fce3ebe71b4b073f2f6

  • Size

    12KB

  • MD5

    2bd1600e0066f8ee1a3bce026c16e656

  • SHA1

    f7f44e3cf36ff5a2a60cc44f2df89b602fa01589

  • SHA256

    67e7b3a24b4cbb0e119a41877398fa850bfc84d0aa516fce3ebe71b4b073f2f6

  • SHA512

    309557c18169527ff92523c2e645fa11325665869d106d6416e664742519fa229e022c9436cde5e7c39a6b3581433bc27f535414e33b71b1c81d32eac046635a

  • SSDEEP

    192:FfDawBhMHDld3M3oQ3Aw0N3hKSZfNxRaaKhy9TYl58msLFcMW:FfDJ3P35OrR0STYlKF8

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://154.204.58.234:443/jquery-3.3.1.slim.min.js

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 67e7b3a24b4cbb0e119a41877398fa850bfc84d0aa516fce3ebe71b4b073f2f6
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections