General

  • Target

    f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0

  • Size

    2.1MB

  • MD5

    0964283038a7b02d242da43b69754b72

  • SHA1

    6da278a4148d2eec0d114547f5b1be314cfc50bb

  • SHA256

    f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0

  • SHA512

    9e229898d9e5919d5ac6cd604727b50b8001273e1f853c5e448a66dd97a99fc2a941a6bb8ef785f7f746444a261905ef597e9f575554800ba56b99767a221aaf

  • SSDEEP

    24576:XTIrvPWMVDcNRpEs36a3iZYz8PChSOLDIVJwKP3R4PCV9c0o9UjAP7CnVTJCvnO7:bF3haC67LZo9UjM7CrYD1LiK3

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1037b34d92dda2440e1b7625f4b8608c9db9b0a68472535c012faba993069e0
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections