General

  • Target

    Remittance pos.invioce.img

  • Size

    58KB

  • MD5

    e62321b20f052583be4d8f34fb979527

  • SHA1

    ea0e4804b69713c65dcd2427867a8b5d5ab150eb

  • SHA256

    ce7c3c09794ee39a804fc03c191aecbc30c6d96cdf8a87cad9d92a06a118883f

  • SHA512

    f9e288d177eed2dac3f5af1129afcabc6458d9e1a8dc7de73e89f5de14b100274e5dfecdf62cf79a2a0dfeb492820ceda68a040a3db38630eecc38231a982a1d

  • SSDEEP

    384:bdqwRdqw4kfwLZLbqLFr7dNET+t3S8qA:b4wR4wGdb2ZEanqA

Score
10/10

Malware Config

Extracted

Family

purecrypter

C2

http://85.31.45.42/Dsgnow.dll

Signatures

  • Purecrypter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Remittance pos.invioce.img
    .iso
  • Remittance pos.invioce.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections