General

  • Target

    3d48dec219554f7fec750540274b5b851b5a8a69f9f0cc674829d1172c191f26

  • Size

    8KB

  • MD5

    c4582c7c9102ce2e9c0d3dcadebf47d2

  • SHA1

    86f38d79ece45cc8c83cc157d104919bad52973e

  • SHA256

    3d48dec219554f7fec750540274b5b851b5a8a69f9f0cc674829d1172c191f26

  • SHA512

    a3423a310ecdb564270592551e59187118baec17cf2dee8c30898484cfa3bcac7f4c8ff5b5ab221a0c38b930c414330eb8bacd8a41965a9095ea6522b6d04212

  • SSDEEP

    192:cQp6J4WoJ/MhFdCSDZgu6FVNyLfef+yxx:cgPdJ/mFcSGYfef

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://154.221.17.44:2888/VNiO

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;NLNL) Host: 154.221.17.44

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d48dec219554f7fec750540274b5b851b5a8a69f9f0cc674829d1172c191f26
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections