General
-
Target
956a768208ff48981465018d86d3c592
-
Size
15KB
-
MD5
956a768208ff48981465018d86d3c592
-
SHA1
a4ec75f3ae2ab4c5880faefcd3b7c78bb906aa2f
-
SHA256
8d9f9bd5bfebfd5ca156a898cc21240d767aea11c8943d34760b05bdff586387
-
SHA512
9f69e1eeed79687e14ca674ff2dc7d82e08648e6e726ad3779fc9f0d576ba4bb4eec05803f3fe377b5e71705178aa5c191430ff56239f60499ddda88eeb33656
-
SSDEEP
192:IGVSJrJf+Bm72P4WOnefWRjyShQSPDSFa/rtKI89Wo7rFysFMIT:pYdh+BeSON2ShQSPDSUzth8957rFviI
Score
10/10
Malware Config
Extracted
Family
growtopia
C2
https://discord.com/api/webhooks/874247640320204820/3B1X1K91RjBXiE1hDnhrKls4Ih9fE6Ge_n0uYQTa2cOY8SZ1MifX9KsVxzk4U4MVBNnJ
Attributes
-
payload_url
https://cdn.discordapp.com/attachments/858108963778199552/872458910047559681/savedecoder.exe
Signatures
-
Growtopia family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
956a768208ff48981465018d86d3c592
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections