General

  • Target

    reverse.exe

  • Size

    72KB

  • MD5

    044099c94609275f1cf3f706291c2a8b

  • SHA1

    285bbc8857a617aa41fce08db5566a737f2b4c33

  • SHA256

    f3ade9d732361d5736562fe5ea9681ac097b7a1a535034e5828defc34a15dcf5

  • SHA512

    a9ff4d29f152e01533d14caf0464d18c5b33749b30a81be8660512ceb3162c8f93229c39e60a2a9a5524e0f1e84ba98d516b610240662ff407e142b92344af27

  • SSDEEP

    1536:IhoPRnlInvj9ZkHuuA9HMb+KR0Nc8QsJq39:IjgAHe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.122.216.213:6969

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse.exe
    .exe windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections