Overview

overview

10

Static

static

10

AllParse_L...gs.exe

windows10-2004-x64

10

AllParse_L...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    allparse_log.zip

  • Size

    10.4MB

  • MD5

    4153aa5a068287a0390d173af50aacf8

  • SHA1

    adc40aed74d98c3656d22b98b2b090baed28f018

  • SHA256

    c4cdb1f07262532c5ad6c2b11a0647a8c08aff180ca75e40f9b12ce7c6c2b3cb

  • SHA512

    e3e230b706d6a3e246eb46880f13e29bb0a7ccae9bd4f015783e8f067a9b585ca491f871d7eb71a7dc59193c543756980d3c951cc4cd6a14c2d658286c00e861

  • SSDEEP

    196608:f7yBkC8LMj96BaSNTl13sae279UVWefyEL4RIvrvN+MUngf5NXCkvIUyNVDvbIm:f2ULimTdMWuNL6IvSI5pC4PyNr

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot6546988438:AAF4CYLITzgov4BI5_0csUsC5C49FDi5D6Y/sendMessage?chat_id=554005447

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • allparse_log.zip
    .zip
  • AllParse_Log/allparse_logs.exe
    .exe windows:6 windows x64 arch:x64

    5940c500f4ee90050044f43314f95f64


    Headers

    Imports

    Sections

  • AllParse_Log/codec-library.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections