General

  • Target

    8ab52b80e3892c7a0afdcc5374f50b8a4e8d77e9be3497dbf1a17d25eb4c0be3

  • Size

    768KB

  • MD5

    02afa463c43170d4a57f0d39019110bc

  • SHA1

    50f90410c7398b28137920edcb1d5ba7b6fcc27a

  • SHA256

    8ab52b80e3892c7a0afdcc5374f50b8a4e8d77e9be3497dbf1a17d25eb4c0be3

  • SHA512

    9c4c69326eec09a750d3a4507a75ac6654048957d5a66b85f5b021da59f91cf2fa15dd614fcff64876b17d4015dd226e3392a056c375793dd5ff6ec347e09228

  • SSDEEP

    12288:/8ig1pe2Z53voIX24q9pCNBrjHkAqQMe+f4UkzCFeiGLXNdkVtLe:/LQpe2Z53vhm4q9pCvhMe+f4USQGnMe

Score
10/10

Malware Config

Extracted

Family

webmonitor

C2

snpandey4659.wm01.to:443

Attributes
  • config_key

    sFitr5r1ExCJl86X6inyc4qxlzwyw8fK

  • private_key

    t1wG88poq

  • url_path

    /recv4.php

Signatures

  • WebMonitor Payload 1 IoCs
  • Webmonitor family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 8ab52b80e3892c7a0afdcc5374f50b8a4e8d77e9be3497dbf1a17d25eb4c0be3
    .exe windows x86


    Headers

    Sections