General

  • Target

    NEAS.101ff24ede14550785a1ac96675020b0_JC.exe

  • Size

    72KB

  • MD5

    101ff24ede14550785a1ac96675020b0

  • SHA1

    de7d9a2f85a846c92de56a58464bb9c5c60488de

  • SHA256

    e45a9e80f4be8a5f055d4ada6837f3d94935b468886dd4a929593ba54254b435

  • SHA512

    0c7b1ece0078a5d6cff637a2159a6fac4f120edab7751a0aff59afe23319cbcf3980b9d567a8177d4b99091cc4679c2572c1c947ddf8134b1d545138f4f4ea27

  • SSDEEP

    1536:ItE/JGXWZRU0jIqAxtwdVUUBI7L9HZVBzWMoLMb+KR0Nc8QsJq39:UE3ZFjxATwLUUWtHZVBzWMae0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

107.148.63.204:996

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.101ff24ede14550785a1ac96675020b0_JC.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections