General

  • Target

    NEAS.b88a05cd4c73788b61301370bfc4b960.exe

  • Size

    72KB

  • MD5

    b88a05cd4c73788b61301370bfc4b960

  • SHA1

    8b432b5febbc0c7d0eeef4f615849a067da85cee

  • SHA256

    bba42b67773a167bd0981e6b994cc7b4db1d9c8b0b8c75f483246fde8e2d9972

  • SHA512

    71e179299945ef8e5897c21d99e1d51ef9009aacc3ebb290155bed607a5b49e5030bff7d9cba14bd085c1dd829a8b4b62f4af6e315d3b85c1388d64fc4012079

  • SSDEEP

    1536:I+XM2aB48F5XiDkPBd5fSjF1hcVWePMb+KR0Nc8QsJq39:xsBjyAZnfEjcoePe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

18.231.93.153:12696

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.b88a05cd4c73788b61301370bfc4b960.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections