Overview

overview

10

Static

static

10

rev_2008.exe

windows7-x64

10

rev_2008.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rev_2008.exe

  • Size

    7KB

  • MD5

    a0765b10c5467c40ad24adc0fcfd4a8e

  • SHA1

    4ca86d46a5fd21bd0eada5497ab5225166ae84bc

  • SHA256

    f716673bed0a9a6b4243077328f36a4e1f6c84ffb704911b379321e1ebdb4d3c

  • SHA512

    cdaf4182ecf2d66473f4722547adec18149ff8ccc9c063b903e6979da9a65330aa1fe3d0c8e11a25f206c5b7b52a4e0b64c824e1cebfc716ecfb08ce2ba844d1

  • SSDEEP

    24:eFGStrJ9u0/6NknZdkBQAVKHaY+mYKZq12eNDMSCvOXpmB:is0UIkBQvHt+XuSD9C2kB

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.16.139.10:2008

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rev_2008.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections