Overview

overview

10

Static

static

10

govate wgte.exe

windows7-x64

10

govate wgte.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    govate wgte.exe

  • Size

    19.6MB

  • MD5

    d72f7a7742ef69a7148981383e094ee3

  • SHA1

    06fa3037c43d908f44c17d5f7a18a3bca7dd2590

  • SHA256

    f0176c4de5bdac87cc1db60abf64f0736ac101548417cba6a16f7481fccf907e

  • SHA512

    1585e73b2ce7cb83468b7522c9e294a7879e136e440a496a81d188399a7731c2119572d47ad3e6ab9cfa842f9c466ca0989d493c4689ad41b4ed34f174b87f9a

  • SSDEEP

    1536:qQfQwcbE4K8r818+iFn+j2oB3He3HWtTYlCXMikPUYxboU6yyyO7:yboU6yHO

Score
10/10
crimsonrat

Malware Config

Extracted

Family

crimsonrat

C2

173.232.44.69

Signatures

  • Crimsonrat family
    crimsonrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • govate wgte.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections