doubleback | 784bc607bd7bf047aec2c9d7445037bdb45d673ae9c30b9718b0f195cfb860e6

General

Target
784bc607bd7bf047aec2c9d7445037bdb45d673ae9c30b9718b0f195cfb860e6
Size 60KB
Sample230109-y5189aba8t
SHA256 784bc607bd7bf047aec2c9d7445037bdb45d673ae9c30b9718b0f195cfb860e6
MD5 afdad4be32188bee71d4f891c479d821
SHA1 13f67ba774361761af8bedb0ffee0ab7b08e0dc4
SHA512 8199ee1749f336a818efcb317cf8d72a8f82149d92db74f22539ec0e1ed3744e213c70b1114fdc49f8224ca06196df86379346982e43a77c6081e1909a8ee65c
SSDEEP 768:hO4apg9TJD/UFPvh45g1WmxValWf5uJMj9TX8Vd76o1x6:hHT+4mjw4IdZx
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

doubleback

DoubleBack x64 payload 1 IoCs

resource	yara_rule
sample	family_doubleback_x64

SHA256 784bc607bd7bf047aec2c9d7445037bdb45d673ae9c30b9718b0f195cfb860e6
MD5 afdad4be32188bee71d4f891c479d821
SHA1 13f67ba774361761af8bedb0ffee0ab7b08e0dc4
SHA512 8199ee1749f336a818efcb317cf8d72a8f82149d92db74f22539ec0e1ed3744e213c70b1114fdc49f8224ca06196df86379346982e43a77c6081e1909a8ee65c
SSDEEP 768:hO4apg9TJD/UFPvh45g1WmxValWf5uJMj9TX8Vd76o1x6:hHT+4mjw4IdZx
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

27004

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths