General

  • Target

    NEAS.40d092021fff22faddd0fb379d13fb90.exe

  • Size

    72KB

  • MD5

    40d092021fff22faddd0fb379d13fb90

  • SHA1

    b97d1dbce73a8da99d7950bfe32d134d34f8c195

  • SHA256

    0ab0cdc23ee6066078bae6e72820ab07de342774b880bda014674c95c98399bc

  • SHA512

    38bb22c87ebb4b65481709508f10eebbb7b21a9c1e7969ce97d11d91b81f8a75f818b64b958698d70aa0daef0d6c84ae5ad5d696bede4ee852fd1805162c83ff

  • SSDEEP

    1536:IwjhWJIVFq7uBNzb7ynNtAqsPKMb+KR0Nc8QsJq39:FoMBNzqNePKe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.211.55.2:3333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.40d092021fff22faddd0fb379d13fb90.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections