Overview

overview

10

Static

static

10

f7612a650a...62.dll

windows7-x64

1

f7612a650a...62.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7612a650a0492780c82ef5d0c1f9ab18d4efac4d71dd0ea8e1939c5fcfbad62

  • Size

    7KB

  • MD5

    36a6c4d32fcbb2f9e27de5a7fe6c3b1b

  • SHA1

    17c344d519d4bea46a97eb1fd91e03b0b0616c5d

  • SHA256

    f7612a650a0492780c82ef5d0c1f9ab18d4efac4d71dd0ea8e1939c5fcfbad62

  • SHA512

    cc33b5216bc82838a2e1ec5a451e9084cc8bef96f7fb547b03989a9a50beb58cbc26ca7d3813d9d7e7afb1f339196a7a219480f689694c952e477370c5f825e4

  • SSDEEP

    96:yBSYTJ21kl9ArBowT2Pu9ZanVVTkxzAmil4S:EU1ksowTUOZanXTuzA1

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://103.146.179.97:80/static-directory/tab_shop.jpg

Attributes
  • headers Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7612a650a0492780c82ef5d0c1f9ab18d4efac4d71dd0ea8e1939c5fcfbad62
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections