General

  • Target

    840000.dll

  • Size

    28KB

  • MD5

    6787927b005c1705d5b5c20278d4e6c0

  • SHA1

    3454b0aa14a67e3d833f1141b39cc6b8b487a0d4

  • SHA256

    9a6b2a199af672934bc1de34dd9c668bbe5106c3d6e4889cf2c8170ad4f9d2f6

  • SHA512

    9afd534da51317a63b2751b8d31e248cd29d732e3b27c048ac9578bb6a1e3c59a670bb4e593d3ccb2b43379279e9d0968ed3b720aa71753ea20ddb64f7df74bd

  • SSDEEP

    384:Jci7KqJESXvZioqMWFDNslwKYmS1NN6AmU4tbZRB:JF1DvZioEM06AmUSB

Score
10/10

Malware Config

Extracted

Family

hancitor

Botnet

1101_jh372

C2

http://fruciand.com/8/forum.php

http://forticheire.ru/8/forum.php

http://nentrivend.ru/8/forum.php

Signatures

  • Hancitor family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 840000.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    57265d838ef6737ecad7f941f2f02016


    Headers

    Imports

    Exports

    Sections