General

  • Target

    NEAS.85f6cc58c348ea94161a5e7c4a076b30.exe

  • Size

    72KB

  • MD5

    85f6cc58c348ea94161a5e7c4a076b30

  • SHA1

    914443d5e914aab7832e69ab1cc1c88daad3cb3b

  • SHA256

    fd88b008e71de114951f470b3db291ea993dbabb733f98220018b91968c8f655

  • SHA512

    dd61f431a966da7bce25cb15ee752624282967cdc9ee808739ab3caafc71bfa12b5a51cc26dfd82e3de9ad4ac5c11f3f888c2e6c2ed769559572796cd3d69183

  • SSDEEP

    768:I2kBm+nPZ+ECcMdhUUPeGLN28gnk6eFvmReu4LtPDM8pGM2ePCHSckzCScx4qXfZ:IjlBBMdio3CReuGfRMb+KR0Nc8QsJq39

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.72:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.85f6cc58c348ea94161a5e7c4a076b30.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections