Overview

overview

10

Static

static

10

ae3967931b...74.dll

windows7-x64

1

ae3967931b...74.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae3967931b7ff26beef77220782b383f3ac42dfbbc5fb17f00ed4025c1769774

  • Size

    5KB

  • MD5

    7b2b3f763fe6d7c7b881605c7e3bc731

  • SHA1

    9fc00afc4dd3618ee09df44044ec369ae4d09692

  • SHA256

    ae3967931b7ff26beef77220782b383f3ac42dfbbc5fb17f00ed4025c1769774

  • SHA512

    3b8ef7520c40c184c3b136aaf59e223f072c6e7b6dd1f881dd1fbbc1ac420c623a83228f365f6a1b74b01677eb4609909e79fc555b22b9bb14cf9423f110be4f

  • SSDEEP

    96:9BQxTdy+O1kxGOvwQmHgA9wDzGn29duXKt:my+1GVf95nacat

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://cs.xiaojingjingaihuifeng.xyz:80/zxcvbmsadfasx86.jpg

Attributes
  • headers Host: cs.xiaojingjingaihuifeng.xyz User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae3967931b7ff26beef77220782b383f3ac42dfbbc5fb17f00ed4025c1769774
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections