doubleback | 8de152ee3fe8804423b7cb9335f5209544d3bcc0eb6dbff3f60555893d5c6696

General

Target
8de152ee3fe8804423b7cb9335f5209544d3bcc0eb6dbff3f60555893d5c6696
Size 60KB
Sample230109-y51bysff43
SHA256 8de152ee3fe8804423b7cb9335f5209544d3bcc0eb6dbff3f60555893d5c6696
MD5 286cf5c57228fa9e4f7902df95f50149
SHA1 c0b0f7dd51745cb07544059b00927aaf9317ec17
SHA512 8ce23bfc3cfb8e080afec66488e28b725ca7c93c1ad7bdeb8757775b47e7abd90d37f9c5ac7ca3a244bcecc49a2a2bee0ba1548d08cb3ad466fda285863b83ec
SSDEEP 768:hO4apg9TJD/UFPvh45g1WmxValWf5uJMj9TX8Vd76o1x6:hHT+4mjw4IdZx
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

doubleback

DoubleBack x64 payload 1 IoCs

resource	yara_rule
sample	family_doubleback_x64

SHA256 8de152ee3fe8804423b7cb9335f5209544d3bcc0eb6dbff3f60555893d5c6696
MD5 286cf5c57228fa9e4f7902df95f50149
SHA1 c0b0f7dd51745cb07544059b00927aaf9317ec17
SHA512 8ce23bfc3cfb8e080afec66488e28b725ca7c93c1ad7bdeb8757775b47e7abd90d37f9c5ac7ca3a244bcecc49a2a2bee0ba1548d08cb3ad466fda285863b83ec
SSDEEP 768:hO4apg9TJD/UFPvh45g1WmxValWf5uJMj9TX8Vd76o1x6:hHT+4mjw4IdZx
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

27004

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths