General

  • Target

    5555513a3b9066871c7d89b9fbc45a30_NEAS

  • Size

    72KB

  • MD5

    5555513a3b9066871c7d89b9fbc45a30

  • SHA1

    6280cc056a58c3d172a542e6937d132b40574f6e

  • SHA256

    be300af894d240e3357db0ec8e15ef1c9f922212860a3f49ffe6ae0f9a24eb0d

  • SHA512

    8e6b60e0528e335858f0a777a197761b30f2757c7dc6b4f3d7dd188c27f63f6c8912d61fb2c52bcc066d2eae31c4971a2266703ae9a66ca54fa9b246a2498820

  • SSDEEP

    1536:Io/YYUl2IzK6ra2TLUtWjYTxUMb+KR0Nc8QsJq39:L/WYIzKsLLcTxUe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.247.128:3001

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5555513a3b9066871c7d89b9fbc45a30_NEAS
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections