Overview

overview

10

Static

static

10

3dbd106573...fb.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dbd1065734c9b3e603bc2a81dbadb77beeb54c6a918a6a4ae0687659ac3c0fb.exe

  • Size

    138KB

  • MD5

    7da02064216481c00e88ca35db73c247

  • SHA1

    99983e91bc7511fcb650c31c26a33b581e242913

  • SHA256

    3dbd1065734c9b3e603bc2a81dbadb77beeb54c6a918a6a4ae0687659ac3c0fb

  • SHA512

    df61e4e5226cf035592ec464b68452507df4178edac853329cda8e0fe06102f8eae65bd9d7a6b68d835e2d7ef4ed3748ccd8bc1ed918eb2a85fb9788e5aafae6

  • SSDEEP

    3072:LbvJ5mz7Bqh1v59Y08mAjs0Ltel+qOeJHlpV8b+Y/YK:Lbv3S7BqjjYHdrqkL/

Score
10/10
9g7dxwarrowrat

Malware Config

Extracted

Family

arrowrat

Botnet

9G7DXW

C2

51.178.165.162:1338

Mutex

Q2909Q

Signatures

  • Arrowrat family
    arrowrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dbd1065734c9b3e603bc2a81dbadb77beeb54c6a918a6a4ae0687659ac3c0fb.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections