Resubmissions

12/06/2023, 09:12

230612-k5827sbg5z 10

03/06/2023, 05:44

230603-gfg1msff96 10

General

  • Target

    rev8039.exe

  • Size

    72KB

  • MD5

    e615680500f5ad5e65f82f19a9dabe7f

  • SHA1

    694f7ec5802e3e5ddb8eddb846b12931ad505663

  • SHA256

    fbdee5fc972782e4d9e8495356938d5fc5086b17ceeb21332d4a3bf15c51098a

  • SHA512

    7a7b20c8957772639af056fe457bad5e2597a84da94d9906a4fba63ba411cf43dd7c7c68d1fe92af80c051d236c222fe98118a771864cdc6cd5fb00142a4e6e2

  • SSDEEP

    1536:IyEfU822gsfQiRsETFYSowhtRATMb+KR0Nc8QsJq39:TE88XgEQiuEhp1ce0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.49.123:8039

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rev8039.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections