General

  • Target

    4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4

  • Size

    9KB

  • MD5

    55ca95b290499cfeb755afb787d4f90e

  • SHA1

    589ca556a2a9b8c415de7e269e4607a10a9b0e5e

  • SHA256

    4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4

  • SHA512

    589a3c15f0024ac6511f7fec5c6e1f4dfe12fc4a9609bd09da29dc26db5e879835fcace332e2b6454862677503a435679df14ff7ac8a470c9f11707ea41c63bb

  • SSDEEP

    192:2sDfhSuEE+rOGSBfUjWJz5jOsO1I1IgAkloCQM:24SOGSBZJz5jyyAkmC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.68.165:5200/IIdf

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4759714d57d30a10f6d6a61a33ef221fcbb4b8d8f63348c8734063dcea158bd4
    .dll windows:6 windows x86 arch:x86

    1ed7a09d693a65fae46a7d7cf706373c


    Headers

    Imports

    Exports

    Sections