Overview

overview

10

Static

static

10

b06f5d3ffc...19.exe

windows7-x64

10

b06f5d3ffc...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b06f5d3ffc537f6a1279cec8ce0f35bf4dcbf6e024b20e125cb3632af3dd6f19

  • Size

    273KB

  • MD5

    5f095f61d90068a5bef8864a42d2db93

  • SHA1

    4c3b1aa82d6d816b97a3b9d88c6991c0ef3ed36d

  • SHA256

    b06f5d3ffc537f6a1279cec8ce0f35bf4dcbf6e024b20e125cb3632af3dd6f19

  • SHA512

    4ebc18bcaa2b2dd5d5c11d54630e123f73ed1010a697c8e57521f049570294c721e6b4afa96f72da8d0cb37f700508b4dd635e32fb4192c1581b42931995bb38

  • SSDEEP

    3072:aN/bNf5vySI8nolTz6EfbPw861SsM9t95ZBfqp3q6OB5GAa6TojkpF/R7ObtQvp2:S/Zf5vy6K36EfbPw861r1e5G562kpiD

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.150.128:8080/Signin

Attributes
  • headers Connection: close Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Detch-Dest: document User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/16C104

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b06f5d3ffc537f6a1279cec8ce0f35bf4dcbf6e024b20e125cb3632af3dd6f19
    .exe windows:6 windows x86 arch:x86

    f21f7fae4de55cff281c7018c55aa961


    Headers

    Imports

    Sections