General

  • Target

    7d14f313d6eaa2f51f88db7efd30e51c

  • Size

    291KB

  • MD5

    7d14f313d6eaa2f51f88db7efd30e51c

  • SHA1

    9d1c9c48c4a068e59add46dbcb39c5028dbd4296

  • SHA256

    89c7d67923732b02cc739b0ace4927a2ecbb8f37f46072fb00896f33683b05dd

  • SHA512

    9bb921c66c8b6c36d4270f5967a2195a129e9fe89b51a230855d28a8458b7ae5682af40826a4035d4dac18be80d0022d650c3d6e62364724c8c224eea6098714

  • SSDEEP

    6144:wqQDhqYPR4+n1XpnHRd7uvEKoY2axlZlkvbVGwh:wqQAYxn1XFHRd7uEKoSTrwh

Score
10/10

Malware Config

Extracted

Family

vulturi

C2

http://45.95.203.139:5050/gate

Attributes
  • c2_encryption_key

    RW0cRe5Zs02XCURF84ns2Q

  • c2_user

    root

Signatures

  • Vulturi family
  • Vulturi payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d14f313d6eaa2f51f88db7efd30e51c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections