General

  • Target

    NEAS.94ee63f13f71e8ceb4753aa637e65cc0_JC.exe

  • Size

    72KB

  • MD5

    94ee63f13f71e8ceb4753aa637e65cc0

  • SHA1

    d46767753dd5e7e62073bfb63c0b1db2cd753260

  • SHA256

    5ae16112164b6c5ac86ce6335eb94743ba8b3d8b06c93dcd9a1b69d07f114235

  • SHA512

    ac433e3e4f02cc7bd7dae5fb301373f096673ba4eeb26edd217397d8d509229bb38a512b2b8fd84a67d28d4eb5c504590eac200deaed1acf4b5d452ded2c8b8d

  • SSDEEP

    1536:I5skQcTPWDloD5SJr+S5mkeGlShNtcpBIR2DMb+KR0Nc8QsJq39:2AcMl4SJr+8yGlQGYEDe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.3.36:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.94ee63f13f71e8ceb4753aa637e65cc0_JC.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections