General

  • Target

    onvrr.exe

  • Size

    2.2MB

  • MD5

    24f10a84f1ed1b3936d9662fd7cc03a4

  • SHA1

    8fa5e42dcd3f41a36de75d4f23c87c300c6b6738

  • SHA256

    28203d79a63a9e4c20edf1dad8c37c2f0e56d67da46816bacd7cfa41bba6ee6f

  • SHA512

    c342de607400758ee16da20962f2689db3cbfae2ac4b600d67d83efa036762043d702b0829ed2d481272d329b44112bd6d6bf9f39cb1c165c8c008800b8b4236

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtR:PBozBdhEV7q8bOQnIFWY+3Je0w5

Score
10/10

Malware Config

Extracted

Family

invictastealer

C2

https://discord.com/api/webhooks/1141433195452190810/fU0jcKodGyjWrg3OTgySbErSJJVKhUJVeLe--EQgHXq1zwILrvl_sPmZRJXQtlM8Sxoh

Signatures

  • Invictastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • onvrr.exe
    .exe windows x64

    2d5aa2bacb12ffd10966c83ca6563356


    Headers

    Imports

    Sections