General

  • Target

    8f3d2a2b923d503ce8532fa82eebe012ec48f013860e3ccef64918a575bb5e7dexe_JC.exe

  • Size

    99KB

  • MD5

    2acd7b3b8a45582bfef4acd017e2e7dd

  • SHA1

    f7c1890cb958f24059dc789972b3d42d0b3c0862

  • SHA256

    8f3d2a2b923d503ce8532fa82eebe012ec48f013860e3ccef64918a575bb5e7d

  • SHA512

    c1abad8c2e30d980f5117245f8a703e5d3c7258b01ebfebab97aa9dfc9c2510f0d6e0a6c223c79737e8f37c88fd92b11072f8f09786bef74cf15b97999fb192a

  • SSDEEP

    1536:dyBAP0EpLHy+SC8Ec/1jN6Du/xHsN568FBUj+l8I1xOb4LjHZngTP:YiPj5S9EuoDjN5zFdZWr

Score
10/10

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot6564235565:AAFyXe9TnSOKcOSVP4bqHUIDWROtKAbpHZY/sendDocument

Signatures

  • Phemedrone family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f3d2a2b923d503ce8532fa82eebe012ec48f013860e3ccef64918a575bb5e7dexe_JC.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections