General

  • Target

    onvrfud.exe

  • Size

    2.2MB

  • MD5

    9f7917c5935e611592e2077ea89fe45f

  • SHA1

    58d970344b75f66daba6264ec2b8b6db847a4766

  • SHA256

    228c1aa6373c07802c686f46efc74ba1991d28b0abe8edbbd989d1efba1945c5

  • SHA512

    48ec43ae9fbf1de77808e54eb7f949a620371ef9b1e05f5a1ab39acc98109fe6918083bed6f4d704d83803eb541ffa8e4a4fda40e63fafec1eec4a69fb94525f

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABti:PBozBdhEV7q8bOQnIFWY+3Je0wq

Score
10/10

Malware Config

Extracted

Family

invictastealer

C2

https://discord.com/api/webhooks/1141428689347821719/tVGP0nx2XPqCuxPx8HfXazygRnFQMwmfOsUJDSqcQsTD-6QR7F-rJgxsIENQiFHfC0uv

Signatures

  • Invictastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • onvrfud.exe
    .exe windows x64

    2d5aa2bacb12ffd10966c83ca6563356


    Headers

    Imports

    Sections