General

  • Target

    4e6ac23cf16f054b9b79ccbe0e486f82.exe

  • Size

    299KB

  • MD5

    4e6ac23cf16f054b9b79ccbe0e486f82

  • SHA1

    0c4572af283c893d87c6040b795150ab55ec0577

  • SHA256

    dae8b56e57d10b540c1664c824fe0dfb6316a8dee0722d1d57b7961147cd857c

  • SHA512

    73327aaa38b9949219f2d19358f8a8b217d0022483af19acaf75ee3c702205bfbb58915462c7f8760bd27a5ea972b8e7118b572d37c954a2ebb53c672c171817

  • SSDEEP

    6144:rTW3YgVzMS73tzrVmSavGXQ+90sGjGms4+/NoNZra8dOJCUJUeANlq:rTW3YmzMc3tzrVmLvGA5sGimst/NQ/U7

Score
10/10

Malware Config

Signatures

  • Anchordns family
  • Detected AnchorDNS Backdoor 1 IoCs

    Sample triggered yara rules associated with the AnchorDNS malware family.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e6ac23cf16f054b9b79ccbe0e486f82.exe
    .dll windows:6 windows x64 arch:x64

    fa9122e88b3229bd962b738364554370


    Headers

    Imports

    Exports

    Sections