Resubmissions

31/03/2022, 16:03

220331-thnx7aedd210

03/02/2022, 08:05

220203-jyw9dsedhp3

General

  • Target
    d2f181221ba9049c02ed7283c9144c7c.exe
  • Size 1.7MB
  • Sample220331-thnx7aedd2
  • SHA256 f47db48129530cf19f3c42f0c9f38ce1915f403469483661999dc2b19e12650b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • blackguard

C2
  • http://funkyjazz.me/

Signatures

File Explorer

  • d2f181221ba9049c02ed7283c9144c7c.exe
    .exe 1.7MB

d2f181221ba9049c02ed7283c9144c7c.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 f47db48129530cf19f3c42f0c9f38ce1915f403469483661999dc2b19e12650b
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
1804798
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths