General

  • Target

    466d0e643397ab0ecb71c4c69853d68ac06278cf01f17260de79036fff6ececf

  • Size

    143KB

  • MD5

    2261618bf774968326f9d5466216a873

  • SHA1

    710eae50692a5c0e8858134f79c315f100fa7ba4

  • SHA256

    466d0e643397ab0ecb71c4c69853d68ac06278cf01f17260de79036fff6ececf

  • SHA512

    6398f9776313982d04c7c014c3361d08375a55de006481bf9b86bdb8c9b9d58643bff413d20d36eff8d4d751471b1f6c05bf97ec5548ef46ec9391b7df9171e9

  • SSDEEP

    3072:gbz5xHll9NHM8mQFA3S4PWRaQtKhkDxBJn:gf5xFl9NNmQa3HCmaX

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://the.earth.li:80/~sgtatham/putty/0.63/x86/putty.exe

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 466d0e643397ab0ecb71c4c69853d68ac06278cf01f17260de79036fff6ececf
    .dll windows:5 windows x86 arch:x86

    fae2a4b40de66be830eef6a4fceec787


    Headers

    Imports

    Sections