General
-
Target
build_4.exe
-
Size
165KB
-
MD5
547933c1a8ea0eb111e619d70ca2c657
-
SHA1
aca394a095c3951ace115ac621a67df1ff4d2e33
-
SHA256
fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea
-
SHA512
5df1b41c5f19e304cc0758b175252c17cc6ccb1d3d91ba2f153138dfbd8e2ef3cd6efe8a136559c55952bdb43a7f206f7ba4e04674ee95363ca8409e48745c2b
-
SSDEEP
1536:ROwwIJbzij3pPEOGFmd8Szav8IDYFUxT1DR5jPVSBSVG41AG9wL4yXacCwPIC6Xi:RyIlz2p8Yai3GNzDeeb4FzeDGwKSHqj
Score
10/10
Malware Config
Extracted
Family
gurcu
C2
https://api.telegram.org/bot6193093056:AAHzyNGUGS9aUG6CCx6ENLoXpCFLzEQywIQ/sendMessage?chat_id=1098292643
Signatures
-
Gurcu family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
build_4.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections