Overview

overview

10

Static

static

10

Dataset/pa..._0.exe

windows7-x64

10

Dataset/pa..._0.exe

windows10-2004-x64

10

Dataset/pa...13.exe

windows7-x64

10

Dataset/pa...13.exe

windows10-2004-x64

10

Dataset/pa...14.exe

windows7-x64

10

Dataset/pa...14.exe

windows10-2004-x64

10

Dataset/pa...16.exe

windows7-x64

10

Dataset/pa...16.exe

windows10-2004-x64

10

Dataset/pa...19.exe

windows7-x64

10

Dataset/pa...19.exe

windows10-2004-x64

10

Dataset/pa...25.exe

windows7-x64

10

Dataset/pa...25.exe

windows10-2004-x64

10

Dataset/pa...26.exe

windows7-x64

10

Dataset/pa...26.exe

windows10-2004-x64

10

Dataset/pa...27.exe

windows7-x64

10

Dataset/pa...27.exe

windows10-2004-x64

10

Dataset/pa...28.exe

windows7-x64

10

Dataset/pa...28.exe

windows10-2004-x64

10

Dataset/pa...29.exe

windows7-x64

10

Dataset/pa...29.exe

windows10-2004-x64

10

Dataset/pa...34.exe

windows7-x64

10

Dataset/pa...34.exe

windows10-2004-x64

10

Dataset/pa...35.exe

windows7-x64

10

Dataset/pa...35.exe

windows10-2004-x64

10

Dataset/pa...39.exe

windows7-x64

10

Dataset/pa...39.exe

windows10-2004-x64

10

Dataset/pa..._4.exe

windows7-x64

10

Dataset/pa..._4.exe

windows10-2004-x64

10

Dataset/pa...40.exe

windows7-x64

10

Dataset/pa...40.exe

windows10-2004-x64

10

Dataset/pa...41.exe

windows7-x64

10

Dataset/pa...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dataset.tar.gz

  • Size

    1.2MB

  • MD5

    54264f44beb954c26cb0ac0d51a34eaa

  • SHA1

    01b61a1272a606087d77352830cc92811caa2af1

  • SHA256

    d25d574246308183b7663f3318a86825077afa2c414936949a45864c28bbff0e

  • SHA512

    235ccce68d4f2709a790695e8407d56f26a3a3580bb95ed3e211f081fe620bdd5ba86b710f0317e78d6056a9b3507d0682fe6aee727e5762d95808151dbaa18c

  • SSDEEP

    24576:IXsLYWdNj2QyKH70LIZiwBPe1nkTrG2fqvAGx1ySxm:IXgd2K0UgX1GnV2rm

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.0.100:4444

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • Dataset.tar.gz
    .gz
  • sample
    .tar
  • Dataset/payload_jsp_shell_reverse_tcp_10.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_11.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_12.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_14.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_15.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_18.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_2.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_21.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_23.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_25.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_27.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_28.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_3.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_30.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_31.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_32.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_37.jsp
    .asp .js polyglot
  • Dataset/payload_jsp_shell_reverse_tcp_6.jsp
    .asp .js polyglot
  • Dataset/payload_meterpreter_0.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_13.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_14.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_16.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_19.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_25.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_26.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_27.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_28.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_29.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_34.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_35.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_39.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_4.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_40.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_41.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_42.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_46.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_47.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_49.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_5.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_7.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_8.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_9.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections

  • Dataset/payload_meterpreter_reverse_tcp_0.php
  • Dataset/payload_meterpreter_reverse_tcp_12.php
  • Dataset/payload_meterpreter_reverse_tcp_13.php
  • Dataset/payload_meterpreter_reverse_tcp_16.php
  • Dataset/payload_meterpreter_reverse_tcp_17.php
  • Dataset/payload_meterpreter_reverse_tcp_2.php
  • Dataset/payload_meterpreter_reverse_tcp_21.php
  • Dataset/payload_meterpreter_reverse_tcp_22.php
  • Dataset/payload_meterpreter_reverse_tcp_24.php
  • Dataset/payload_meterpreter_reverse_tcp_26.php
  • Dataset/payload_meterpreter_reverse_tcp_3.php
  • Dataset/payload_meterpreter_reverse_tcp_38.php
  • Dataset/payload_meterpreter_reverse_tcp_43.php
  • Dataset/payload_meterpreter_reverse_tcp_45.php
  • Dataset/payload_meterpreter_reverse_tcp_48.php
  • Dataset/payload_meterpreter_reverse_tcp_8.php
  • Dataset/payload_x86_1.elf
    .elf linux x86
  • Dataset/payload_x86_17.elf
    .elf linux x86
  • Dataset/payload_x86_18.elf
    .elf linux x86
  • Dataset/payload_x86_19.elf
    .elf linux x86
  • Dataset/payload_x86_20.elf
    .elf linux x86
  • Dataset/payload_x86_22.elf
    .elf linux x86
  • Dataset/payload_x86_33.elf
    .elf linux x86
  • Dataset/payload_x86_36.elf
    .elf linux x86
  • Dataset/payload_x86_4.elf
    .elf linux x86
  • Dataset/payload_x86_44.elf
    .elf linux x86
  • Dataset/payload_x86_5.elf
    .elf linux x86
  • Dataset/payload_x86_6.elf
    .elf linux x86
  • Dataset/payload_x86_7.elf
    .elf linux x86
  • Dataset/payload_x86_9.elf
    .elf linux x86