Overview

overview

10

Static

static

10

NEAS.6cab2...a0.exe

windows7-x64

10

NEAS.6cab2...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.6cab27e18ba91dea52aa8c8270f7a0a0.exe

  • Size

    72KB

  • MD5

    6cab27e18ba91dea52aa8c8270f7a0a0

  • SHA1

    9be63708be77166217e8ef098bc0fa69639bda26

  • SHA256

    b6463ab13792c43a9d969243194138d8d155f2caf31fa5b9401a01378c54f5da

  • SHA512

    696c180f1170226c12e85fb658c7949ffa7c8e1cdf8a5e11bfd916b64b5ae591f5ff86570725fa0e4ad2dab7486275d60a881a9e8cad1d3e7999970a9f481d4e

  • SSDEEP

    1536:IabhR22aqL2Z9CvaXNgkZ8GtMb+KR0Nc8QsJq39:1bhA2jSZ9Czk6Ce0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp_dns

C2

191.144.152.55:33619

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.6cab27e18ba91dea52aa8c8270f7a0a0.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections