General

  • Target

    Physiological_Client.zip

  • Size

    2.9MB

  • MD5

    6bda2ecd61510bb967e6ad0363d8c09a

  • SHA1

    3c83d479be84dbc433e3fa4ad77e4d73d86d74bf

  • SHA256

    5dce3684fdd84d1c0138b852d2f3ffb97af42ce09ef987def82273322b81f006

  • SHA512

    472d24f533514952c1ab54e263c74e1ea111e1ee8e58590b9432c0e4b131dc3e0193d02cc3ba5c27f06c029853e6b1a14c0834d3e8910e5574980b76a99fb10b

  • SSDEEP

    49152:QQeuVIJcM9q8UIrgFfSu2mSDmRF2+I4gsan6ynf+DS4F5SKS0OuSt+ZTkxoQa:QzmFf/lP9IVVn6yUS4F5SKBleo3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Physiological_Client.zip
    .zip
  • Physiological Client.exe
    .exe windows:6 windows x64

    03542a0ccc80c82441f4a9e87b79dbe9


    Headers

    Imports

    Sections

  • WinDivert.dll
    .dll windows:4 windows x64

    0b649f8e17494bb31b47f6e959a1769c


    Headers

    Imports

    Exports

    Sections