General

  • Target

    NEAS.427e3a2d5f2c3120043e1010cb283d7fce619e0f0142462023fe1d8b85856cee_JC.exe

  • Size

    168KB

  • MD5

    fc486e492c58bc0cc18d8adde04502a3

  • SHA1

    237dc72bd6f188622eda53c9965a6ea85a6dcf11

  • SHA256

    427e3a2d5f2c3120043e1010cb283d7fce619e0f0142462023fe1d8b85856cee

  • SHA512

    b5770fdbb9b7b4a558175c6e91c2bee06b1065cf40be442ca9588c9ef7c77d6680eaeaf5dd4490976513bed0f31024f66be3582b127d9728f9e61688ed87d6dc

  • SSDEEP

    1536:iGqTFdcCOu6cOezvzMsJtEl0CM5sHl6pxZVcVoTZ/Gr:iG0mCOu6c1zosJt5CM5qlBoBk

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

107.174.252.84:7428

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.427e3a2d5f2c3120043e1010cb283d7fce619e0f0142462023fe1d8b85856cee_JC.exe
    .exe windows:4 windows x86

    755ff5685977c35d19d06fe199920169


    Headers

    Imports

    Sections