General

  • Target

    NEAS.b3c77a98a85e7076f9345090685f5b20.exe

  • Size

    5.8MB

  • MD5

    b3c77a98a85e7076f9345090685f5b20

  • SHA1

    ea5cc1a249ca6b90d1d7a561ddfa792f101e3220

  • SHA256

    0d16480ae7348bc29a718298b290e5ff25d0a3ddca5061cfc1283819edd875ac

  • SHA512

    1d5dfc44e0cab914aa59dce048d180e06bb6919b02c84757a10688d383f28f11d97f93354df906f6416b8e3b7d072a21d2abe51dccc909f7514d1a7ad9a120aa

  • SSDEEP

    98304:0gBOLscYr9NrQO6lSdAd7qvlyBhbUhrZsTY3ycd8izlxGhzAqK44YzXp2juHsNGz:dOoc+dQO6+Ad7qdriTYlfzlIhMS2KHAu

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

146.220.185.23:2284

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.b3c77a98a85e7076f9345090685f5b20.exe
    .exe windows:4 windows x86

    87bed5a7cba00c7e1f4015f1bdae2183


    Headers

    Imports

    Sections