General

  • Target

    reverse.exe

  • Size

    7KB

  • MD5

    f4927b1ecadf53fbdda4bd2676185c19

  • SHA1

    a58b50a04d01e766389ae961439c13405c61b0fc

  • SHA256

    10656117380ef76643dbd40c5a4fe582b7aaee2a1e62d1016d8244289fb6e31e

  • SHA512

    f0d90b54706c4e4bf9221d44a01b149b48d09f7af7a7dc8834d65b08958d721e2f822086ce81785530fdc8a4de7ebe6d09ac354ddf1035cf75aed88f5c76e694

  • SSDEEP

    24:eFGStrJ9u0/6SIRnZdkBQAVX+acQKtRqOeNDMSCvOXpmB:is0fIhkBQ/RQKHSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

4.236.160.36:10001

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections