Resubmissions

22-05-2023 08:14

230522-j48vdafa34 10

30-03-2023 14:59

230330-scqn6adb45 7

General

  • Target

    5a1a37fb68eeb445df8c647dab8af952.exe

  • Size

    48KB

  • MD5

    5a1a37fb68eeb445df8c647dab8af952

  • SHA1

    95f2c1a9ae32d39ed616d2007bbcf6f74feba18f

  • SHA256

    631d7e6e0d9b03928ea24c0f846e3aad741bd675b8837035e8bdc028dc25fc98

  • SHA512

    349c588d9fc96ecf4db16004afec719e00e6ec887a4d89319a150b9ef75b1836fb8dfbff1a1fc0953a0dccf6a27ae117a00cd94c0991ecc70931fd1349cd8d05

  • SSDEEP

    768:4g/hgfJYO9KqosayemfSbvZ5l9GCAPk2/PWC/cEnUSBQtP9:R/hgGO9KrHmKbvtelRJnUSBiP9

Score
10/10

Malware Config

Extracted

Family

gurcu

C2

https://api.telegram.org/bot6288342522:AAFSUbGsrmP7ztzdv4uDMwLGETn2Ea_tq1M/sendMessage?chat_id=1953693386

Signatures

  • Gurcu family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a1a37fb68eeb445df8c647dab8af952.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections