Behavioral task
behavioral1
Sample
7d14f313d6eaa2f51f88db7efd30e51c.exe
Resource
win7-20231129-en
General
-
Target
7d14f313d6eaa2f51f88db7efd30e51c
-
Size
291KB
-
MD5
7d14f313d6eaa2f51f88db7efd30e51c
-
SHA1
9d1c9c48c4a068e59add46dbcb39c5028dbd4296
-
SHA256
89c7d67923732b02cc739b0ace4927a2ecbb8f37f46072fb00896f33683b05dd
-
SHA512
9bb921c66c8b6c36d4270f5967a2195a129e9fe89b51a230855d28a8458b7ae5682af40826a4035d4dac18be80d0022d650c3d6e62364724c8c224eea6098714
-
SSDEEP
6144:wqQDhqYPR4+n1XpnHRd7uvEKoY2axlZlkvbVGwh:wqQAYxn1XFHRd7uEKoSTrwh
Malware Config
Extracted
vulturi
http://45.95.203.139:5050/gate
-
c2_encryption_key
RW0cRe5Zs02XCURF84ns2Q
-
c2_user
root
Signatures
-
Vulturi family
-
Vulturi payload 1 IoCs
resource yara_rule sample family_vulturi -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d14f313d6eaa2f51f88db7efd30e51c
Files
-
7d14f313d6eaa2f51f88db7efd30e51c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ