General

  • Target

    testpanderequests.exe.bin

  • Size

    186KB

  • MD5

    7e7e25597f56f24d262e989abbb31222

  • SHA1

    f3342f1c948a2ef8775d72389cfb76adc7c7ed21

  • SHA256

    99c5747e5ada4de53bbed50ae5670f04ef4584632c873a060f54f42c70fbcf8c

  • SHA512

    0872e14e4ec016ba0489b9ef26f3295173dc5ab37d92f93d2074e2ea518503945dcdaa6e4990942ee9c80bf1dc56d654c77a7059b15aa834abf2671ef28708f8

  • SSDEEP

    3072:m7JN07Kkj7kE5Ft4rTy/MD89bUDlgAfiTMhtlxfhXXV:mf+7fQO289bUBgAfRB7XX

Score
10/10

Malware Config

Extracted

Family

gurcu

C2

https://api.telegram.org/bot5975822207:AAFJtzAlzLoF8RfkpKUagQJGRi0ksib6w3g/sendMessage?chat_id=1396661331

Signatures

  • Gurcu family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • testpanderequests.exe.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections