General

  • Target

    08e0f966045e31445f39c0435d0c007c.exe

  • Size

    11.2MB

  • MD5

    08e0f966045e31445f39c0435d0c007c

  • SHA1

    add811376c4335f304feaa744c796c5b280e0c92

  • SHA256

    ae8a475f6837a139c4f08f404f4e97bd33d4a7f801ca0d360d243de66d60dee4

  • SHA512

    a4e27dffa831a6b8a5b4c7182375d253e1631fe3f70f6c468f47311d6cd65283f9611a08397e832a27299db0625fcbec09407e9a141897142fa702562bc6e80a

  • SSDEEP

    6144:C5VCb4QuzFipIozzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzf:s8NKFip

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

43.231.4.7

lazystax.ru

Signatures

  • Tofsee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08e0f966045e31445f39c0435d0c007c.exe
    .exe windows:5 windows x86 arch:x86

    0bdef4d92a94790d7d279561a490c5bb


    Headers

    Imports

    Sections