General

  • Target

    NEAS.94a872916cf1becd2b32b20808d92d90.exe

  • Size

    74KB

  • MD5

    94a872916cf1becd2b32b20808d92d90

  • SHA1

    93a8da935f6028828afbfef09a294da2bece1746

  • SHA256

    f7019ed365f2aea4b232cceec7941f77f1301d51d4580cddf0e2b334eb3a9e8e

  • SHA512

    5f3a6b987b9a3e8e54eeb9b317a163ff1fdfbbd4fdc61d4d7e1dc4e248d7a42f9ea5acddc7f2e949fbc8f94e804f88dd952bb9604a8a37c676c072e6e1d1f57f

  • SSDEEP

    1536:IVzqTCKkxPHd2EuxGxw9Mb+KR0Nc8QsJq37Uq3:YzqTC/VXu6w9e0Nc8QsCV

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.178:4443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.94a872916cf1becd2b32b20808d92d90.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections