General

  • Target

    Astration_loaded.zip

  • Size

    2.0MB

  • MD5

    3528d81bb5ff092d0a2b372e8b1ed3e5

  • SHA1

    e2d7379712a670b6f412818318abdded9e8d63c0

  • SHA256

    0c432483961ddff8b5038f0d32a0f924b08291965c8dbb3b0fc3a7d85b0e7776

  • SHA512

    ff65f408b356d94e2f7895a968c761ce0dd56b7685e7911706e91db2884b2d8d1aee7859e84171b13b4fa9b7ea8af4ede4b7e0f5bc1a595c57b9cac65d898fb6

  • SSDEEP

    49152:EaZpsYOIKsL1XsqfUibS1zR1Rrs96T8zQ:EaXM2L6qf9bMrsomQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Astration_loaded.zip
    .zip

    Password: infected

  • astration.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    4d139fabc478a3aaef3357e80c776c11


    Headers

    Imports

    Exports

    Sections

  • astrationn.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    de361320741c3eefff5c87665ab4f6f4


    Headers

    Imports

    Sections