General

  • Target

    NEAS.19eea789a816a30df0570c7b059b4860.exe

  • Size

    72KB

  • MD5

    19eea789a816a30df0570c7b059b4860

  • SHA1

    5535e890b55171215b8690814487ab96bd39bc4e

  • SHA256

    f4e9ac5a377e69efa3504b91fdacf19bb9127e1995aa45e8865acb8e3e75a610

  • SHA512

    1e0a7940581136d4d14d7c8bc4770add7fc1edd360418f90f34dca6d42fc9e254044c5fad64443e3f3c5ebf65212f479f1354cf79f1c20e5841225b8e3c5b3c2

  • SSDEEP

    1536:IsWTJuVNgq/v+hoxoCSRJW6ymD2n8J1Mb+KR0Nc8QsJq39:9WV4Ngq+hovSRJhy98J1e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_named_pipe

C2

\\.\pipe\msf-pipe

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.19eea789a816a30df0570c7b059b4860.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections