General

  • Target

    shell.exe

  • Size

    72KB

  • MD5

    892f0d736fb816af68e41d87302f0371

  • SHA1

    fe825c74ab41f1154d2494afcd6aa9686d42ffe7

  • SHA256

    2ea556c3906f27a7ba2d704d4133108f16cf3997650d95a50cbd1725a6b82a5a

  • SHA512

    2df628a9d4fe5e7b03abdd2b1686d64c55c14f2cc0f5cfa44245898e5e96594370ce73d246e9478343d3bcb4930946f31fb113caf85ac1e4523f75fc7d84430b

  • SSDEEP

    1536:IyFV6gZDjfUUZ25NW8lG8nkJGdDbMb+KR0Nc8QsJq39:NlZDVZ25NW8Y8nkgJbe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

139.59.113.146:13337

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections