General

  • Target

    fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea.bin

  • Size

    165KB

  • MD5

    547933c1a8ea0eb111e619d70ca2c657

  • SHA1

    aca394a095c3951ace115ac621a67df1ff4d2e33

  • SHA256

    fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea

  • SHA512

    5df1b41c5f19e304cc0758b175252c17cc6ccb1d3d91ba2f153138dfbd8e2ef3cd6efe8a136559c55952bdb43a7f206f7ba4e04674ee95363ca8409e48745c2b

  • SSDEEP

    1536:ROwwIJbzij3pPEOGFmd8Szav8IDYFUxT1DR5jPVSBSVG41AG9wL4yXacCwPIC6Xi:RyIlz2p8Yai3GNzDeeb4FzeDGwKSHqj

Score
10/10

Malware Config

Extracted

Family

gurcu

C2

https://api.telegram.org/bot6193093056:AAHzyNGUGS9aUG6CCx6ENLoXpCFLzEQywIQ/sendMessage?chat_id=1098292643

Signatures

  • Gurcu family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fdc83f58a30b80240c5887c6646324600f3896421059b80caddacfdb196287ea.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections