Overview

overview

10

Static

static

10

PhemedroneStealer.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PhemedroneStealer.zip

  • Size

    7.1MB

  • MD5

    5c34d6f02a963003637d026723a15383

  • SHA1

    2e610cf6026665601b9c780af9475508c4681f95

  • SHA256

    97b5b7b3b23a2b928001416adc5d0f296c7250347c4785b5f9761cada5d3abf0

  • SHA512

    0edeb63b5af3dfb95d1db497fa7ee90f23df04a8382c8afeb58ecf5d0b400e2ad046e593c618bef279b51cbf3e7e39fbbedf7f1d3f9a5ec59e0a193f6f482eae

  • SSDEEP

    196608:ojPTTPzqUMNpv5k4kNSVTPLpSybCWtbXIz8cN2Lj8/2dlQFClzH:G7qrNgR4XUgLh4ocEnWgu4b

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

http://rakishev.net/wp-load.php

https://api.telegram.org/bot6421901210:AAErC913wmPS9T_-XJrvOWFdTxw2TkS248A/sendMessage?chat_id=5896425070

162.213.251.134:228

https://api.telegram.org/bot6301483836:AAEZRbk8wKzuJcYx_EdZAXoUXM97mUrZnL0/sendMessage?chat_id=5896425070

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • PhemedroneStealer.zip
    .zip
  • 255d887e4aee44b4a811fd99c76d7df6ce442316125d236f9b3891bd56b82f8c.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2c669f5390b14c63c91f4898419792aaee9c0b996dc348419e2ee84179cf3531.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 52817df4b19ffc52e81384b3117888fc053326b9635152fcbd7ca62d00801887.exe
    .exe windows:4 windows x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections

  • 58b525579968cba0c68e8f7ae12e51e0b5542acc2c14a2e75fa6df44556e373f.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 59c71b235595f91647ec9cb99c0b1ccaf2f00d444383a2d0e646f05a989f8200.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 6bccfdbe392cf2eef8a337fbb8af90a662773d8cd73cec1ac1e0f51686840215.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 9aa89ac25459a7910489f306a1ad36af2c0ebe66a1eed7f749d53a8162b157b4.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a604eed1325b12671370e268783cfa74f8675a468492ff98416187d73768b4af.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • a72d37979c90b5850bc50bd063a5da3bfeebea11b2ebecff85f35b7586433f38.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • c93d28e89af52917c466181f07f704b19501d876b43788af4e89ea5e3e9bc433.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • e5e92ec5d1d5be22b05694956de0321475105789279acbc9e83d7796026ec385.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections