Overview

overview

10

Static

static

10

Jefutyl.exe

windows7-x64

10

Jefutyl.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46ad12d7699b3f9a0ce5f70b08324677.bin

  • Size

    38KB

  • MD5

    46ad12d7699b3f9a0ce5f70b08324677

  • SHA1

    4b3950b2a378661310472427acaf26272373ed21

  • SHA256

    3fb1c3589b3a7636337ae5284974f79f99e4c015977a4fa1eeeeb42d79590181

  • SHA512

    d455cd28d8365380494f2ed8f59cf99fcd17dba3b94efe558d307b95abf7e232e5b17ad47f1fb068d4e3bec7214fa88e71fbb8203d1728cfe0371c5013d8d5ef

  • SSDEEP

    768:Q6cNV9G4WCsEimmJFLzW/6/RDFC+cPn22xHoMvBhw1gFakQdloivG/ERKjT:ZC1WlFw6/pPUxTw1cakQd6ivbRKjT

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot6421901210:AAErC913wmPS9T_-XJrvOWFdTxw2TkS248A/sendMessage?chat_id=5896425070

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 46ad12d7699b3f9a0ce5f70b08324677.bin
    .zip

    Password: infected

  • Jefutyl.exe
    .exe windows:4 windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections