General

  • Target

    474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c

  • Size

    2.1MB

  • MD5

    4dfc8be7a5ac8b09c90e61ecac64e48c

  • SHA1

    730cbec0208067c38dd1e121f0e4d7030005a3d6

  • SHA256

    474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c

  • SHA512

    de1b9bc367fe11b70ffde55a7be65cc3db54a6ef2347044fff1e39f01126f8572b538d9e2d0a70a19a66d54459c0729ccc407fb9fa61486bf829b5b6d6cc992a

  • SSDEEP

    24576:6VgJvPmvYJJcNRWD5GmrdXuonigABiHJwD7SMP5eJZ8bOpcNMzCxwVxCeVTuCv6g:1g4hglTgPzUWxCcYD1m7UW

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 474b3095f22da4ccc56cff386cc68377e2fc4b65f517389253cc16102649423c
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections