General

  • Target

    reverse.exe

  • Size

    7KB

  • MD5

    8e0c8d5c3a48f0117f4178ceaf004f20

  • SHA1

    dff52bde6d67dcbd47f504ea339a39fbee3db988

  • SHA256

    7491e51f5dd0b3716fe4443afda882724a8647bb7cc5c9f62d1453feff704401

  • SHA512

    9f0e00cc1b8157c88ac6391fe5eb806234d89bbc59a17a3e4be2281f6c9b216eb212858239ac27a2b9cd787c0819e0c637e3a6ad40fcbfae172ad10924e5283d

  • SSDEEP

    24:eFGStrJ9u0/6lanZdkBQAVoaYLYKZq+eNDMSCvOXpmB:is0wSkBQVtLYoSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.68.69:6060

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections