Overview

overview

10

Static

static

10

NEAS.da0f0...90.exe

windows7-x64

NEAS.da0f0...90.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.da0f00fa690c773ef6f72cbca456d490.exe

  • Size

    72KB

  • MD5

    da0f00fa690c773ef6f72cbca456d490

  • SHA1

    dec61b10f27bf4b10351684aaf37703006f955ff

  • SHA256

    56a19d1354038e2fca2272d148ec1961ade608ba85a383b984c8897e5ce7535f

  • SHA512

    7288a140a7302e246e09c30d33c83494295adbd493f9e1cfea16515a32728b0ac4769d80b6193ecced116364b7674b7125f9c0d99998c0e5e61baf6576679a60

  • SSDEEP

    1536:IKyCVqH+wpSn4JCk50R8yh9uMb+KR0Nc8QsJq39:1yCmArkU8yh9ue0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

172.20.0.63:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.da0f00fa690c773ef6f72cbca456d490.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections