General

  • Target

    NEAS.2714976754a46ab5f63e3243c0ca9c30_JC.exe

  • Size

    72KB

  • MD5

    2714976754a46ab5f63e3243c0ca9c30

  • SHA1

    822c448fee10e5b2776bdebbb75219dae0ad1a93

  • SHA256

    cd2f1bc3f73525c0af8a00f0e5e3fbba1cef20d7a4df5f6bb4df7ee0b09293e9

  • SHA512

    dca82cd0362386a3814c51a638db24a7f22b538d01eb06c82c482782d45a4853d64460de96b0499126eedfc03a2e35b7a654428eb7fb5a7a9b142785e68fe116

  • SSDEEP

    1536:IHlpZn7X+Ddi8qV16yO4mOcPUTFfCw3qMb+KR0Nc8QsJq39:ulDX+DMbVUz4mO+EFqw3qe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.135.154:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2714976754a46ab5f63e3243c0ca9c30_JC.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections