General

  • Target

    rev.exe

  • Size

    72KB

  • MD5

    e0bf60901bd3b1662df625bbe59d33e5

  • SHA1

    9af2111bf2d543ec4cd51c03aa787271a2ba7a13

  • SHA256

    d1b32586009519e5657e72b82114af3c0416544436b4080e0577e5ffea807d1b

  • SHA512

    7d12cb3b105aceecdb02b39a93e0f372ec86c0922ba7290e2dced6d423c4b470b63207ebe416b0d10b7780edb338a54ea3b58f15dd71b4cc1a0f338f852f7577

  • SSDEEP

    1536:IQ/gHxrJfM/y2Ao8IpBIrcFjIVMb+KR0Nc8QsJq39:X/gR1k6o8UBIrcOVe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.54:443

Signatures

Files

  • rev.exe
    .exe windows x86

    Password: infected123

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections