Overview

overview

10

Static

static

10

NEAS.d49fc...JC.exe

windows7-x64

1

NEAS.d49fc...JC.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d49fc502544d2b5187143d619c606fb476035c9de58a338f1904f8d3d3185c52_JC.exe

  • Size

    172KB

  • MD5

    a26053f3dde6ce7069565dded0c822dc

  • SHA1

    42a9164d2614afaa02680f3d6efb8b59f34e6e49

  • SHA256

    d49fc502544d2b5187143d619c606fb476035c9de58a338f1904f8d3d3185c52

  • SHA512

    ca7c6a97cc45e21d4d46086c871a1d3dbcdb305e10742f7c53494ae614a9b209e106f042c800cbb79e3c15133c8b03c701f70fd6e80132b6e807f212f103ca91

  • SSDEEP

    1536:rGqTFdcCOu6cOezvzMsJtEl0CM5sHl6pxZVlVoTZ/GI:rG0mCOu6c1zosJt5CM5qlCoBP

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

107.174.252.84:7428

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d49fc502544d2b5187143d619c606fb476035c9de58a338f1904f8d3d3185c52_JC.exe
    .exe windows:4 windows x86

    755ff5685977c35d19d06fe199920169


    Headers

    Imports

    Sections