General

  • Target

    c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52N.exe

  • Size

    3.1MB

  • MD5

    e10ef14b275bedf0f965dbb42c2171a0

  • SHA1

    bafc677262a3cb5eff678d4584baa43afa252217

  • SHA256

    c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52

  • SHA512

    c24bea2ce3843eba8baf32f770434a8a2c450306dc8161f298103d5a946855dda7febc6cd8dd599b7a39b24466fe81434017fd8568fefeed6e36cd25b82a69fb

  • SSDEEP

    49152:P2Ppun36K995p9oHnaWCXYD1QTyhtpf/kLZQdBk1e2VQBwX:OPp+36CHoHw2htN/hdB8e2

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5b48caedca30b1c2ce78f548509eb85396a6b3c8fd5a0a87dddfb3b2a7d4f52N.exe
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections