Overview

overview

10

Static

static

10

reverse_tcp.exe

windows7-x64

10

reverse_tcp.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    reverse_tcp.exe

  • Size

    72KB

  • MD5

    4bb7be4f659be57a5b4202b3db1fa8d9

  • SHA1

    b00622117d26ea801f48e0ba25d284f44fabef6d

  • SHA256

    8b1d5aa11ed0c240ce65a4ca6f61f73b7bdc47888e6cfefcaf8a151b01e4ed6d

  • SHA512

    54228f2e48325b2cb262e99726712a9d9c3338e643d7a0406b23a52a3c829fc445433ed88e49176bb0f08b71dabf6d0cb25e9ff992d140bbfb80b249941e2b5c

  • SSDEEP

    1536:I5mAlmg7S0hM8WZ01Wj1XldWwvrlfdyugvswPDMb+KR0Nc8QsJq39:fAr+iM8cCWjBlMwhlyNvs4De0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.170.0.9:5555

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse_tcp.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections