General

  • Target

    reverse.exe

  • Size

    7KB

  • MD5

    cedc316a75f461facb72511004041ebe

  • SHA1

    c8cfb6ec83d6dd1a0cca2d749c9c52016c802dc0

  • SHA256

    eaee4fbde88845b024e5bacc896fbeda04e6784e8d1314a24ec9b3d2edef8fa2

  • SHA512

    21ace230e5a6cf57b459ec62e2cb848f38ffc8eebfc909b30917d498a57b1b01e29ef72d0ae93a2dbd3ff5f17fef4c5be141fcb4af38ef7851cc3746fba33e08

  • SSDEEP

    24:eFGStrJ9u0/6UFxnZdkBQAVAWYYKZq2eNDMSCvOXpmB:is0NFBkBQjYoSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

5.252.176.77:45098

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse.exe
    .exe windows:4 windows x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections