General

  • Target

    bigger.exe

  • Size

    287KB

  • MD5

    e7978edb4b553918e4222d8457c23aeb

  • SHA1

    3d1ac508e9efa8777eb78ea12e90f1adaeabaa0e

  • SHA256

    c6c02a4e5dc5d830d9d16cb51e6e4ef3e640385648d0ec09627032757704eaa3

  • SHA512

    0863911083e059f16a2cd3503418d086b47d9ec9b3dcd54e5883c49a6a1163f56e42c6f3306cb3bb51b5ea89dcd7c1097c9356257377245ba552d3e38a9b4700

  • SSDEEP

    3072:9Zx/VapN7+4VcKRgh4twB17xCPU9OEbFT0WKgzxVPIU2ZrL5ThWKXnyKvubikLkW:9Zx/Vg+43RAfTlB9DFo9iUrL5Th7X14D

Score
10/10

Malware Config

Extracted

Family

bruteratel

C2

45.43.2.62:443

Attributes
  • c2_auth

    ransomness12345

  • uri

    /blog

    /view

    /register

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36

Signatures

Files

  • bigger.exe
    .exe windows x64


    Headers

    Sections