General

  • Target

    0d80dfd6210c601119788192d13201c70ad7ec9375a3f308ee1322aaab79cb85

  • Size

    361KB

  • MD5

    92175d22a32d45d8d1beadf1e99ad9f6

  • SHA1

    13dfbe33cc691dd6533c45d001970f5e6b0e26d0

  • SHA256

    0d80dfd6210c601119788192d13201c70ad7ec9375a3f308ee1322aaab79cb85

  • SHA512

    5ea867093683a1a4f920ad0d4a35b3ce935be982a44ada394d74213dcdea70aff66a93eb782c345c3bbf0bb3ea2f4afb28e6e96d3f08e8eee0997b778d3ac187

  • SSDEEP

    6144:CBaFE4883mQyNJH3iHRdWATq0YNZH89oQKnDPT2IggL/phAjn1xN:C6EsmQkHSHPBGRz89oQKD72nYrm

Score
10/10

Malware Config

Extracted

Family

webmonitor

C2

pitbullcant.wm01.to:443

Attributes
  • config_key

    A7HOB9ROz2LrVrPGPRzC4MVB2KltDr7S

  • private_key

    i9KVkEro3

  • url_path

    /recv5.php

Signatures

  • WebMonitor Payload 1 IoCs
  • Webmonitor family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 0d80dfd6210c601119788192d13201c70ad7ec9375a3f308ee1322aaab79cb85
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections