General

  • Target

    ab9f0940ebde3602b50fc2156a02af86eaa1d027d14cd91dba4d7f474f7df65d

  • Size

    8KB

  • MD5

    a5bc079fe3a19d11f8898f888a96cb5e

  • SHA1

    4d8ef7cf9bc92dea68af6237353274b07cf6a3ae

  • SHA256

    ab9f0940ebde3602b50fc2156a02af86eaa1d027d14cd91dba4d7f474f7df65d

  • SHA512

    a45057c7c48e0aa1ec11cf9c651cb0f2ed52d29567d369fdd7ba69be3f3c873e07a077d74fd876770ee0a5e18b7e42c9864c939056154fd65e5d2f9118e75cf4

  • SSDEEP

    96:OMG6J4z6NclPJQ4ME9MFdCSDZgvG6FDNa07kqef3lIPpvwMSZ:Op6J4WoJ/MhFdCSDZgu6FDNBfef3yx+

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://154.221.17.44:2888/VNiO

Attributes
  • headers User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;NLNL) Host: 154.221.17.44

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab9f0940ebde3602b50fc2156a02af86eaa1d027d14cd91dba4d7f474f7df65d
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections