Overview

overview

10

Static

static

10

NEAS.14168...20.exe

windows7-x64

10

NEAS.14168...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.1416885a317a0be24f6e49747f6b7d20.exe

  • Size

    72KB

  • MD5

    1416885a317a0be24f6e49747f6b7d20

  • SHA1

    3fd362302a48efc58c3a798e8746b9938e350718

  • SHA256

    921625676681277616e9106a4acced393f395cb8adc38511d1006f9ee0b7fb1f

  • SHA512

    78b514b10797ff7ec34916326e799df2a52627c1a78bbb48377e0f240ce45982b5e458c1bdf5d2f23b2af8e0791470874277b6b87675df589ba893c933e240f0

  • SSDEEP

    1536:IA1ut22jT+WkyQmTHcOyBPPcvQLMb+KR0Nc8QsJq39:put2UKJyhcOyBXcWe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.91.223:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1416885a317a0be24f6e49747f6b7d20.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections