doubleback | da482b46353f652ea536d29cc0709537512dbee701e8d026497676e8cf4ad36b

General

Target
da482b46353f652ea536d29cc0709537512dbee701e8d026497676e8cf4ad36b
Size 52KB
Sample220201-pt27qsebdm
SHA256 da482b46353f652ea536d29cc0709537512dbee701e8d026497676e8cf4ad36b
MD5 9bb745f96f1afe73dc77f640d968c8a2
SHA1 f13287ed1cefa1da141005158d8db2f3b1505d08
SHA512 b5cde3dbd779e9567e98dc63bbbd0ae23aa1d786cb7ce5af1639ef7400764afa26528e811e66310622bd564908edf6c65a385fe5697eee100f7c6a1612848581
SSDEEP 768:1aAQaSH1F5D82DP0ZchCWRUjKtus6raeuLKfaNR3Q:rkp8A0SM06SX3Q
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

doubleback

DoubleBack x64 Payload 1 IoCs

resource	yara_rule
sample	family_doubleback_x64

SHA256 da482b46353f652ea536d29cc0709537512dbee701e8d026497676e8cf4ad36b
MD5 9bb745f96f1afe73dc77f640d968c8a2
SHA1 f13287ed1cefa1da141005158d8db2f3b1505d08
SHA512 b5cde3dbd779e9567e98dc63bbbd0ae23aa1d786cb7ce5af1639ef7400764afa26528e811e66310622bd564908edf6c65a385fe5697eee100f7c6a1612848581
SSDEEP 768:1aAQaSH1F5D82DP0ZchCWRUjKtus6raeuLKfaNR3Q:rkp8A0SM06SX3Q
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

18792

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths