General

  • Target

    1563c707316c4b74e1b697d924ac22c1

  • Size

    567KB

  • MD5

    1563c707316c4b74e1b697d924ac22c1

  • SHA1

    2154b9fdeff4a729984a1e4e9152ddf13ce428dc

  • SHA256

    cab0da87966e3c0994f4e46f30fe73624528d69f8a1c3b8a1857962e231a082b

  • SHA512

    b389f945d1fc5679d35e08933d401dcd592136f6d999482ed5866173a1a8b2ae2e9747d815de1221197d5530918be9aee11d6d91e11c9fc7be60dbd54e962d82

  • SSDEEP

    12288:lPfN/y7YUrL08z+YOC/VON7O8Q8SYXfGhB:lXNa7YUMYC7TQXwfGH

Score
10/10

Malware Config

Extracted

Family

bruteratel

C2

d1mk8l112pgjru.cloudfront.net,d1ashlvz1t40i3.cloudfront.net:443

Attributes
  • c2_auth

    QP5DD3SET7UMG8KB

  • uri

    /precious-versions/onedrive

    /latest/developer/documents

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36

Signatures

  • Bruteratel family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1563c707316c4b74e1b697d924ac22c1
    .dll windows:6 windows x64 arch:x64

    f70c41d0af3624ee1f132f4c9a493cd3


    Headers

    Imports

    Exports

    Sections