General

  • Target

    061e21868f4f3ffd2695c0482fe2e5bfd4ce6ab4008c1b9d988968d772348a74

  • Size

    177KB

  • MD5

    b3a428d6d0a9f080cf47ad9e3c1bc0d7

  • SHA1

    2eaea2a6da46ddfa2dc3ad64e68fa820972a034d

  • SHA256

    061e21868f4f3ffd2695c0482fe2e5bfd4ce6ab4008c1b9d988968d772348a74

  • SHA512

    3251dcb017b790c44ad4233c65498cf1538673ffa373b92505dda4bb926a634c6ebc716e0afec5de5bb08ccb3e6f745ed3c7fb2f989344a1412333400134317d

  • SSDEEP

    3072:MXHZ6gtMrv2FGR1lXU53laRWiNJq0YfuyXBXb+E7NBTe2g0i0IZ:MEgqrv2I3UlaRWQImy99IZ

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.245.128:443/qhJ9

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 061e21868f4f3ffd2695c0482fe2e5bfd4ce6ab4008c1b9d988968d772348a74
    .exe windows:6 windows x86 arch:x86

    b6dde97c4bc03c183089805bf7d702b1


    Headers

    Imports

    Sections