General

  • Target

    sys.zip

  • Size

    457KB

  • MD5

    ac732232b665f61d349319e37460abb8

  • SHA1

    3291c9ca3aba04379391e8c5cb7c57264d1a8c08

  • SHA256

    fbb17fcbb78a3c7d6ab25984cce87958fcd70a8f09a5c013120f4a4bb620744c

  • SHA512

    7e444f990dcff902f959f870c504c43fba3e015711ab309aa8e8a5befd76d5a6e5c296a7af3a7d9890f1f0cebc053f9c40533d461ed0498b7e31fe30a4be14d4

  • SSDEEP

    12288:IAGJgaKHBtITuOerur+BsIsC4fl1+o0Uf4J8vqXklbHyWnLj:e7ytISOZrmFr49vKklbSWLj

Score
10/10

Malware Config

Signatures

  • Phemedrone family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • sys.zip
    .zip
  • Phemedrone.Tools.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dnlib.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • stub/stub
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  •  ⥪⮢ 㬥.txt