General

  • Target

    3c55324d6bd95cff8f111fb479ce29c0_NEAS

  • Size

    72KB

  • MD5

    3c55324d6bd95cff8f111fb479ce29c0

  • SHA1

    731b4743add0d02c03a4d79ac3a311e74b32b210

  • SHA256

    42e9a5229e50ac0dac3a066f33b449f0967e402c8afb2b6e9598da577f197c2c

  • SHA512

    51dd4d9c80ade2ad6bb7015993966eff82d21b1870dd09d11c51ec2ccc07728ec13c5c782dacfdc4a478215fe5a2e36e651a6314ea8d69157f68eb70933fa74c

  • SSDEEP

    1536:IeGwkf1a1+qsx+BM/C4OESOuq5aEWLEnagc3n7AMb+KR0Nc8QsJq39:FGt1m+qs8My3O5dWLEagc3nse0Nc8Qss

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.4:2333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c55324d6bd95cff8f111fb479ce29c0_NEAS
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections