General

  • Target

    NEAS.37728a49fa7ff5886a1e0e4542419e50.exe

  • Size

    72KB

  • MD5

    37728a49fa7ff5886a1e0e4542419e50

  • SHA1

    402d98a5ab7ad3a56d9d4fc28c2c8f535f5b0099

  • SHA256

    42b0187fd29ddcc3c4f3238a8a605e15fd12b7e1aa9317ccfe3e2247750227f7

  • SHA512

    51f8c43a6d721bc8f2c69ca143de66a33a0f3f1a2b528595696cc0e6cba099e875ff4f1790c1221c6a7377d25f50253ea9d7a6725148cba7e53de7c1a4ef58cc

  • SSDEEP

    1536:IzSWr0oWmmE5pgxrk4Nrjep2eAMb+KR0Nc8QsJq39:SSW5cE5pIFriI7e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.85.130:5000

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.37728a49fa7ff5886a1e0e4542419e50.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections