General

  • Target

    f7fcd7edfb46bf4003106731a9f2c22a.bin

  • Size

    88KB

  • MD5

    f1680da5e2d60f48bccdab4f2e0ad01b

  • SHA1

    ff67f972cee73de515d49ca6bcbed55ebbc2b11a

  • SHA256

    7dea63a3fa0d673589b7c2c8a801af2436b648d2555dd66e38a7736c8c452ad9

  • SHA512

    2d9c4a5523ba012b5282103a3f13750df550496703ec2d751bf819542fd157844aac9721f286774111ea20a28b811a6a438c563096caf31fd8712cb9740aade8

  • SSDEEP

    1536:Vlj52dCn3IpOx6VRxa6cDHReh8Zw8qmmZtHSFYux9K2stjdqOaqbeUa3j9by:ay3IwU26UxVZgmwHSGuxkH7beUUjU

Score
10/10

Malware Config

Extracted

Family

purecrypter

C2

http://revitape.com/gdy/Pftcp.dll

Signatures

Files

  • f7fcd7edfb46bf4003106731a9f2c22a.bin
    .zip .ps1

    Password: infected

  • 1fe0daa8e8374c77b7bf90a48e1c9d309cdc686cca84441a84957cedbf039c70.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections