General

  • Target

    reverse.exe

  • Size

    7KB

  • MD5

    4c4d0cb91f913f00396e184a71bace26

  • SHA1

    ed437eef788c37e61f7b1a6499ba9ae45c827f8e

  • SHA256

    6d4b5c6d46a480f164c429d16be2c0d1949159201ff8f14ec9ef803c16f52dda

  • SHA512

    742e49f1403c1953f8e409025a2341cee23884062642ed4fb4db3b2e3f4781353723ad168c6cd9d854023bb3c91381e164f27d55cb246af707c0e56e9a336eca

  • SSDEEP

    24:eFGStrJ9u0/6GYPnZdkBQAVz6WYgKZqUeNDMSCvOXpmB:is07YrkBQSigeSD9C2kB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.25.185.224:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reverse.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections