General

  • Target

    NEAS.a77c97796643c5522d292106cb1998a0.exe

  • Size

    72KB

  • MD5

    a77c97796643c5522d292106cb1998a0

  • SHA1

    94e015a40cc055fbe7ad2cb1874b7f8fabe7e536

  • SHA256

    a113cad2f1ee670e2b33f97b49b76796e7555ddbbbbce5e9368e298636183513

  • SHA512

    fd38e737f1bdc9761e8d22df6813c641371d9827c18e0d1cb9fde7799dbfce50212ccf7b752cb0a0a35b390037489e28747b2aa67ab06c5047d2e506dd652028

  • SSDEEP

    1536:IO8etlLurtMcw1aRfaXX74a/MU+Mb+KR0Nc8QsJq39:p8yRurtjwyGsa/Mhe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.136.128:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.a77c97796643c5522d292106cb1998a0.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections