Overview

overview

7

Static

static

7

FancyBear.exe

windows10-1703-x64

1

Resubmissions

13/07/2023, 11:33

230713-npb93sge46 7

13/07/2023, 10:15

230713-mac3dshb6x 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    FancyBear.GermanParliament

  • Size

    23KB

  • MD5

    77e7fb6b56c3ece4ef4e93b6dc608be0

  • SHA1

    f46f84e53263a33e266aae520cb2c1bd0a73354e

  • SHA256

    5130f600cd9a9cdc82d4bad938b20cbd2f699aadb76e7f3f1a93602330d9997d

  • SHA512

    fb35607e7b1279a404927f4fb8b714aa766872d66a187af9a89955143b21785611d6073bfaf28686b4d93dba1756073b802afba82ff0e8a1272dd853ab88924a

  • SSDEEP

    384:+X1tbgqsHghXzCwilLkFO5hHk4u7jBayixgb:+fkuXWwiY4VLyc

Score
7/10

Malware Config

Signatures

  • Winexe tool used by Sofacy APT in several incidents 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FancyBear.GermanParliament
    .exe windows x64

    Password: infected

    6f89d98825a04cddb5739b8c725acb54


    Headers

    Imports

    Sections