General

  • Target

    CapeTest.exe

  • Size

    72KB

  • MD5

    8f53bb998efb79f55275edb88d775fcc

  • SHA1

    fc36af99119ba2065e61f972f0bbe3e14cc6c0b0

  • SHA256

    c6a250ed299f5843a54dd22901f5fcb844fe4b200728a2e015130d6fceacba88

  • SHA512

    e9cc766203a2618ecf0c125cdf568bbe7fbff2103077795b518a58a7f955f46918797b087018aa668d2be088def3776579489deaa3715be8b088c204b0d3d712

  • SSDEEP

    1536:IgYRWMkzo0VFvCqEbV/S1g+mWLgnSefsVMb+KR0Nc8QsJq39:zqRKEbV/S1AWLgmVe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.3.161:80

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CapeTest.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections