General

  • Target

    reverse_25.exe

  • Size

    7KB

  • MD5

    bf6c7d1b84bd272bf2c3b7766a2e2447

  • SHA1

    9b529f34f877dc8443724905ab3667b9ab9ddcd5

  • SHA256

    b097cbbcf08100b0054eea5bb51976c454f8a688b2feffdd6aacc7c0b70732d8

  • SHA512

    83a2f2265bb7b8d4aa33beee2f43c84f03e6d0d6eb8a6fa153605f4f8564f440a8e9639eca3e4fb02063ba1e96585cb027b94d0032814f79aeaab926bb0e2888

  • SSDEEP

    24:eFGStrJ9u0/6b22nZdkBQAVt6WUYKZqmeNDMSCvOXpmB:is0U2OkBQ4qYYSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.8.0.2:4025

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse_25.exe
    .exe windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections