popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

reverse.exe

Metasploit Meterpreter Generic Malware PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Oct. 21, 2024, 2:03 p.m. Oct. 21, 2024, 2:07 p.m.
Size 7.0KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 2a18a597200994af2b1eaa57d789f979
SHA256 43c13796f343898e53317703cd4178e7e00efcf8b1aa20ce6a5d349ddca5949e
CRC32 93E72CDB
ssdeep 24:eFGStrJ9u0/6PEnZdkBQAVoakfwKLqFeNDMSCvOXpmB:is0CokBQVxolSD9C2kB
Yara
  • Windows_Trojan_Metasploit_91bc5d7d - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • MALWARE_Win_MeterpreterStager - Detects Meterpreter stager payload
  • Generic_Malware_Zero - Generic Malware

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
188.166.177.132 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .ewti
host 188.166.177.132
dead_host 188.166.177.132:443
Bkav W64.AIDetectMalware
Cynet Malicious (score: 100)
CAT-QuickHeal HackTool.Metasploit.S9212471
Skyhigh BehavesLike.Win64.Infected.zz
ALYac Trojan.Metasploit.A
Cylance Unsafe
VIPRE Trojan.Metasploit.A
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (D)
BitDefender Trojan.Metasploit.A
K7GW Trojan ( 004fae881 )
K7AntiVirus Trojan ( 004fae881 )
Arcabit Trojan.Metasploit.A
VirIT Trojan.Win32.Generic.BZPS
Symantec Meterpreter
Elastic Windows.Trojan.Metasploit
ESET-NOD32 a variant of Win64/Rozena.M
APEX Malicious
Avast Win32:MsfShell-V [Hack]
ClamAV Win.Malware.Metasploit-10022275-0
Kaspersky Trojan.Win64.Shelma.b
SUPERAntiSpyware Trojan.Agent/Gen-MalPack
MicroWorld-eScan Trojan.Metasploit.A
Rising Trojan.Kryptik/x64!1.A2F4 (CLASSIC)
Emsisoft Trojan.Metasploit.A (B)
F-Secure Trojan.TR/Crypt.XPACK.Gen7
DrWeb BackDoor.Shell.244
TrendMicro Trojan.Win64.SHELMA.SMB1
McAfeeD Real Protect-LS!2A18A5972009
Trapmine malicious.high.ml.score
CTX exe.trojan.metasploit
Sophos ATK/Meter-A
SentinelOne Static AI - Malicious PE
FireEye Generic.mg.2a18a597200994af
Jiangmin Trojan.Generic.auyjj
Webroot W32.Malware.Gen
Google Detected
Avira TR/Crypt.XPACK.Gen7
Antiy-AVL GrayWare/Win32.Rozena.j
Kingsoft malware.kb.b.980
Gridinsoft Trojan.Win64.ShellCode.sd!s1
Microsoft Trojan:Win64/Meterpreter!pz
ZoneAlarm Trojan.Win64.Shelma.b
GData Win64.Trojan.Rozena.A
Varist W64/Rozena.IG
AhnLab-V3 Trojan/Win64.Shelma.R274246
Acronis suspicious
McAfee Trojan-FJIN!2A18A5972009
DeepInstinct MALICIOUS
Malwarebytes Trojan.Dropper.Generic