General

  • Target
    14edb72021fa36f77ef8b477af70ef25bfd1dfa72331fb2f48ab09a8817f9cec
  • Size 32KB
  • Sample220609-k2mpssecck
  • SHA256 14edb72021fa36f77ef8b477af70ef25bfd1dfa72331fb2f48ab09a8817f9cec
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • hancitor

Botnet
  • 0912_1237732

C2
  • http://featicent.com/4/forum.php

  • http://whysturprom.ru/4/forum.php

  • http://usseleteria.ru/4/forum.php

Signatures

File Explorer

  • 14edb72021fa36f77ef8b477af70ef25bfd1dfa72331fb2f48ab09a8817f9cec
    .dll 32KB

14edb72021fa36f77ef8b477af70ef25bfd1dfa72331fb2f48ab09a8817f9cec

  • IMPHASH 559d7f683356c58f04f061849901282c
  • SHA256 14edb72021fa36f77ef8b477af70ef25bfd1dfa72331fb2f48ab09a8817f9cec
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
4352
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths