General

  • Target

    NEAS.c8ecd13fc4975e6f9d5432f5d6688100.exe

  • Size

    7KB

  • MD5

    c8ecd13fc4975e6f9d5432f5d6688100

  • SHA1

    73ffdfbeba85002a8143c3ef03ab19b14f669430

  • SHA256

    2dd581ad6d0172d352b3209580582bf5b4653570ff7b117c330a936d18c2de9e

  • SHA512

    52f583d2dc3841972805e6ba34d7a6d7db581c535a12b0c60649de6ddebdac478466e85afca6ec7204210224d290c354ea3f22a44e2e97bfeddb1ea9b414fa22

  • SSDEEP

    24:eFGStrJ9u0/6tqxnZdkBQAV286WY+BpKZqheNDMSCvOXpmB:is0sYkBQMi+BpjSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.247.131:7777

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.c8ecd13fc4975e6f9d5432f5d6688100.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections