Resubmissions

12/06/2023, 09:10

230612-k45cmabb67 10

03/06/2023, 05:44

230603-gfe62sgb2t 10

General

  • Target

    rev803.exe

  • Size

    72KB

  • MD5

    bb8a49bbda3acb825505ff3f12db7b91

  • SHA1

    cc137d7e39bd48c3887ae469fc1fb0724b41bb72

  • SHA256

    255f67295a18d99a36ab0bd6077380e18450158f18fdfc8d71a81f70d38cc6f1

  • SHA512

    c7c9da1352f9ef24fb865a09c42340b0929cd5feced7d7626ad1a405343eecb1eda9b16617d7b43eb542089700703332e174b7e849fb6dffa1cc1bf9559cb199

  • SSDEEP

    1536:IqtfT/Rlq6ai7UXlEAvOPbcmRCHIpXC4uaMb+KR0Nc8QsJq39:dT/Rlq5i7klEzZRA+XCse0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.49.123:803

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rev803.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections