General

  • Target

    5fb049cf1ea5542ebf8bc632c073d73650aff7fb6788d3a254539601616b04a0

  • Size

    24KB

  • MD5

    b975fb7617719b3f4eb72a20b1bcd5cd

  • SHA1

    950d8df3e70c4b7aaccaadde44dfcd38be53f2b1

  • SHA256

    5fb049cf1ea5542ebf8bc632c073d73650aff7fb6788d3a254539601616b04a0

  • SHA512

    61a9eba71f672bf04e17c94a3ec45dbc13e151e6717bd82e327c43948174655c59dbd54bd8b7ed4f220e7328a83aa79a00f3bd497aedb7045a9b2969604937cd

  • SSDEEP

    384:4CeBv11nVaFFGjb+bryZJSWm7wjqM9WLeuaqMywaap1D+dH9qiYvB2PJq:4nv13aFF+y2QLVaqzqju

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://202.61.85.76:443/jquery-3.3.1.slim.min.js

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fb049cf1ea5542ebf8bc632c073d73650aff7fb6788d3a254539601616b04a0
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections