Overview

overview

10

Static

static

10

NEAS.dee6a...JC.exe

windows7-x64

10

NEAS.dee6a...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dee6a81c85a6ed68832f156199460200_JC.exe

  • Size

    112KB

  • MD5

    dee6a81c85a6ed68832f156199460200

  • SHA1

    a6f7a512fc6342359f5fb0d2fb6daeb6758968b7

  • SHA256

    9fc54308fc7277d352b8edce67980aaa4e83592fe9bab5b0bf8eb6570116be44

  • SHA512

    38e8b04d344afed7e23011b8e9053e5da164f9cd525849c823ff0b1afa49fadd7e1dabf0a863859cb49cac919bf4be14a8abd3fe83829a2da9dbf8afaf0a387f

  • SSDEEP

    1536:lgEnK+kITPGTUSr4xFWKSO5T3rZDFgSwEKSK99jzpmt:lgEK+kUPpSUxAS5TbZDFJwEKSK99jVQ

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot6679850513:AAFdgKkWbOeInNfvW5k872NqJc2ixwFBVQE/sendMessage?chat_id=722407487

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.dee6a81c85a6ed68832f156199460200_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections