General

  • Target

    3a4eeb57e670976edcad791a3b52d71f

  • Size

    106KB

  • MD5

    3a4eeb57e670976edcad791a3b52d71f

  • SHA1

    e7aae814f2ef476b2367b29df6840a44fa40105c

  • SHA256

    6f60e643800ed84586976250a6b9e7e769a26602ff2608dccf078597373eb691

  • SHA512

    0f83d7fbe4d0c2ab66ab61d30b223f9c4ad466a7b992316762975684fedfe43270857e2e57a4915be194c8dedf0eb061a0fbb824991e62c3199e00d33014db7c

  • SSDEEP

    3072:Mx5DcNevq9GkBsm4qEtCfhA2N5BGS5fZOY2h99ME:M7HvqNymXEtCVbbBSh9CE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a4eeb57e670976edcad791a3b52d71f
    .zip
  • Hook.dll
    .dll windows:5 windows x86 arch:x86

    43d4356f8aec0620d94a432f7d4eac58


    Headers

    Imports

    Sections

  • Hotkeys.ini
  • OrkBot.exe
    .exe windows:5 windows x86 arch:x86

    6357bf600b0a4c663d1cbb6a45d03641


    Headers

    Imports

    Sections

  • Settings.ini
  • Teamlist.txt