General

  • Target

    wercih.exe

  • Size

    2.2MB

  • MD5

    ad8578528595faba4b38b4f48344b619

  • SHA1

    179aa1b6fc5b0e075de2c7f29640694fd5d965d4

  • SHA256

    495af13fbf2e3d7be580dfa4f7097a11f0ab32ec6f6d76ca2268d94c5d1e25c1

  • SHA512

    6f701a53830f044ebe346334aea235c65fba92fbb1ec1d84bb320c5ee071db2e81ca22f02e0085d72dd41526b4552efe34cc98f6a4626297000ddbcf3efeecf8

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtu:PBozBdhEV7q8bOQnIFWY+3Je0wm

Score
10/10

Malware Config

Extracted

Family

invictastealer

C2

https://discord.com/api/webhooks/1141534853179908206/Qq-TIyyq2kPLHuE6jfmuHPg3qWMlkdNm3JcrDqQKgTMcv6Vdt32AlrqmfCC8NBCPZ1uR

Signatures

  • Invictastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • wercih.exe
    .exe windows x64

    2d5aa2bacb12ffd10966c83ca6563356


    Headers

    Imports

    Sections