General

  • Target

    reverse.exe

  • Size

    72KB

  • MD5

    d0159349934aeb698f8c74f0f105ad82

  • SHA1

    66135c4184120f051719a470336edb49caa3dcc1

  • SHA256

    a12f989c4d2259bd58487c97cd17fe3d36b2bd91d4a0ace9f3dd07cb8f8dd686

  • SHA512

    10477dd83299ba070dcea1024115b42e69ac2ae3c320a2967f1cf5367c23f1bbea0762222b562245a960f38ea5859822f2f1fdf91516d6730c2e84d6f1c43b98

  • SSDEEP

    1536:IgAP1X5Wr628C6KZq9e8Mb+KR0Nc8QsJq39:XAP/W22DY9e8e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

34.142.247.189:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse.exe
    .exe windows:4 windows x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections