General

  • Target

    NEAS.f5b8b72e9c2ab78f5ce156937ab2bfa0.exe

  • Size

    10KB

  • MD5

    f5b8b72e9c2ab78f5ce156937ab2bfa0

  • SHA1

    0ef2fad1af2c063a3e785d649a3f8d7ae728fa63

  • SHA256

    1c175899081133ad5ede9c4df8276d8a86e3b181c22d3bfaf60e3d3fee21e284

  • SHA512

    a86b6c39cea8beb203f70c0498999778aff2fa665cc7d18008e8b9a6a9fa966850826f969282ae8020621be096c71d5140e78245b012b7fabd98c70082faba00

  • SSDEEP

    192:hFo9jja7wQbjO5GQC477GQQ7E5pz6HJoZZ:hOFj2wijkO4fc7CT

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.32.131:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f5b8b72e9c2ab78f5ce156937ab2bfa0.exe
    .exe windows:6 windows x86

    f42abe290ec30f10b46cd4003487c160


    Headers

    Imports

    Sections