General

  • Target

    5d405168422b326e80b5f4eaa6c03bebc8a48388af37569c7587a7d07d10ac8aN.exe

  • Size

    2.1MB

  • MD5

    e475dede428ed3679cac29a4a4f788c0

  • SHA1

    9e15c671cda0690594135aec15621f087a9eb3d6

  • SHA256

    5d405168422b326e80b5f4eaa6c03bebc8a48388af37569c7587a7d07d10ac8a

  • SHA512

    9e3e3844d97e300274eee716a3dead85b8ca818d05785fe5904e595ab774fda51eb2548ff0e56d20bfd132e8fb100c24dc3f342c200c3c156a07dad39b67d20c

  • SSDEEP

    24576:nZK01ntfGTcNRkzTepTWR3SQ8hiul8DQTOoKPyY2+kIxFKWiS9dsCIVT1CvugYD2:S/etdByBuWiSHsCRYD1

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.137.133:666/VSlG

Attributes
  • headers User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; BTRS125526)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d405168422b326e80b5f4eaa6c03bebc8a48388af37569c7587a7d07d10ac8aN.exe
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections