Overview

overview

10

Static

static

10

rev.exe

windows7-x64

10

rev.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rev.exe

  • Size

    72KB

  • MD5

    74d8804e05d0ea882e2c8fd012c0e7c6

  • SHA1

    f4bf74c07c922630bc28373b289fc13ddbada173

  • SHA256

    07a5b18a192d9685be3e1dfd77c152aeb7f2140814b1f44b8a81370f20208078

  • SHA512

    fc2c63a29748fce3fa5bad079be1a16949d1fe1b1b62dd5ec6bbab9b5926b15fd4b845fd1c0f3193e9f42dfc0a38b0ffa0e84839cd1dd7d37de3c260c16ca9a3

  • SSDEEP

    1536:I06BdopvbIhc0qcWfdVAagKALEDBMb+KR0Nc8QsJq39:D6TopvbnrB1V0KALEDBe0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

13.52.76.119:1337

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rev.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections