General
-
Target
1376-0-0x0000000000020000-0x0000000000021000-memory.dmp
-
Size
4KB
-
Sample
241111-yd6dwstnas
-
MD5
295ea0e7c6566a032d60e75f8c3a5b3e
-
SHA1
9a671078e9c097f634e0cc70140f51e11a6483b6
-
SHA256
379eeba7eebbeaa1f49290c4bd2263e49fb093493754928b5317c5ea6e97dcd0
-
SHA512
d7b4a16d25def1804e80dd739c3d774d476dc168219412c40b3751071573556e6838a1c317c1772eff5ea5e03fcdbe18e142f969b6da579b899e6618cc1a567b
Score
10/10
Malware Config
Extracted
Family
metasploit
Version
windows/download_exec
C2
http://64.176.168.194:58081DogCsDogCs.js
Attributes
- headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; Tablet PC 2.0; .NET4.0E)