General

  • Target

    dce1bb60cbc9a99eaa513e7e6e55e2a58f0c5395ccbd5ab6d4ac333ae51d4f50

  • Size

    12.1MB

  • MD5

    3dd91c056cd02cd9089f187a55d27312

  • SHA1

    0d178fa5d757783f8360323e0d428cbb13681370

  • SHA256

    dce1bb60cbc9a99eaa513e7e6e55e2a58f0c5395ccbd5ab6d4ac333ae51d4f50

  • SHA512

    478e597379f30d56448d67320d2ecda2858cfc20a2188e3cf4687f83f63b5f2d4a2d96e130479f8eabd5a52bb0c4ce83167dda97525ab80587276471419cc8b9

  • SSDEEP

    6144:65VCb4QuzFKpIozzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzr:08NKFKp

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

43.231.4.7

lazystax.ru

Signatures

  • Tofsee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dce1bb60cbc9a99eaa513e7e6e55e2a58f0c5395ccbd5ab6d4ac333ae51d4f50
    .exe windows:5 windows x86

    0bdef4d92a94790d7d279561a490c5bb


    Headers

    Imports

    Sections