General

  • Target

    1376-0-0x0000000000020000-0x0000000000021000-memory.dmp

  • Size

    4KB

  • Sample

    241111-yd6dwstnas

  • MD5

    295ea0e7c6566a032d60e75f8c3a5b3e

  • SHA1

    9a671078e9c097f634e0cc70140f51e11a6483b6

  • SHA256

    379eeba7eebbeaa1f49290c4bd2263e49fb093493754928b5317c5ea6e97dcd0

  • SHA512

    d7b4a16d25def1804e80dd739c3d774d476dc168219412c40b3751071573556e6838a1c317c1772eff5ea5e03fcdbe18e142f969b6da579b899e6618cc1a567b

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://64.176.168.194:58081DogCsDogCs.js

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; Tablet PC 2.0; .NET4.0E)

Targets

    Tasks