General

  • Target

    NEAS.24d7865984b97e299bbfbfd44f506480.exe

  • Size

    7KB

  • MD5

    24d7865984b97e299bbfbfd44f506480

  • SHA1

    0fe9610fd354297cb2db45a32c4f837d09d3147c

  • SHA256

    230b773d57517cc7a91b17a68533f28935481f9bc769e71d0d69b3a6644963af

  • SHA512

    c650934aed7acd12f2026998cfff4a76682388edcc17b5489d1f0f4f610e07db8e99a7e62cde2bc8dac2db9e5461cbac4b2ea3baf20ecd9a67e87ef2458a822b

  • SSDEEP

    24:eFGStrJ9u0/6W2IRnZd0BQAVKocRwKLq9IeNDMSeXixpmB:is0kk0BQvzRwdISD9eS2B

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

45.139.227.160:49185

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.24d7865984b97e299bbfbfd44f506480.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections