Overview

overview

10

Static

static

10

revshell.exe

windows7-x64

10

revshell.exe

windows10-2004-x64

10

Resubmissions

12/06/2023, 08:59

230612-kx4shsbb47 10

03/06/2023, 05:44

230603-gfjt8sff98 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    revshell.exe

  • Size

    72KB

  • MD5

    9d6b5bb47253b9e12691f77c7038a409

  • SHA1

    ac3b136c5825467e4b5f1bf1f019955551e54a0f

  • SHA256

    523c7381c61271636b2d49296cddeb5855a5eb81c98a255c7cb2e3e49280d645

  • SHA512

    ebc90a55aeb062c00e0e59a6caf444ed466b0902f43da18573dbe2c1208237de4ee859ae7096b61acbcbc5e44e8a407bcfe727a5e6bae0ddbaed9f3dd1b7052f

  • SSDEEP

    1536:I1wXFekDfbupDlW3ssfwdMb+KR0Nc8QsJq39:WT0upofwde0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.49.133:6666

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • revshell.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections