Overview

overview

10

Static

static

10

CWGrabber64.exe

windows7-x64

1

CWGrabber64.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CWGrabber64.exe

  • Size

    3.2MB

  • MD5

    b75fd8e4816c59fb7010815866b3ff8d

  • SHA1

    1c4a82442da1028d684197d6579cdaed85d192d4

  • SHA256

    8da8821d410b94a2811ce7ae80e901d7e150ad3420d677b158e45324a6606ac4

  • SHA512

    80b08f062165d85064bc562eabcfab31ffd830d61c79471c60e5cca048417fe24cda92666af84d67386ebb9de3bd997a613e25b543776a32498e9b8e23e24350

  • SSDEEP

    49152:GA3n4E7UMfPiyE4SBjLDtQZabasLaN8ex/z7bk1h9l:b3U71Bj/tQ6LO8Z9l

Score
10/10
aurora

Malware Config

Extracted

Family

aurora

C2

77.91.85.73:8081

Signatures

  • Aurora family
    aurora
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CWGrabber64.exe
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections