Overview

overview

10

Static

static

10

869e6e56d6...fc.exe

windows7-x64

10

869e6e56d6...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    869e6e56d6c9849420442213a468c9fc.bin

  • Size

    138KB

  • MD5

    869e6e56d6c9849420442213a468c9fc

  • SHA1

    4f7e64126cd4adf324ee989ffa1efb5870178074

  • SHA256

    9f46555944110c0b982e05620a58e6a3828fa6ad8e8dd8f55894e25150207a5e

  • SHA512

    db12472b8d74c6f0feafc52d0233f725561de54c6d23687f48b5d8a16c211c20f4abf6bc8057246cc048c958f15f921dff664af49e0c9bb18911839a47ac0a85

  • SSDEEP

    3072:Kbvr5mz7Bqh1v59Y08mAjs0Ltel+qOeJHlpV8b+Y/Yd:Kbv9S7BqjjYHdrqkL/

Score
10/10
5t74s3arrowrat

Malware Config

Extracted

Family

arrowrat

Botnet

5T74S3

C2

febbit3.ddns.net:1338

Mutex

Y5EJ2C

Signatures

  • Arrowrat family
    arrowrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 869e6e56d6c9849420442213a468c9fc.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections