731812403191b60503e017d88e23b1a3[.]bin

General

Target
731812403191b60503e017d88e23b1a3.bin
Size 4.1MB
Sample240220-c1ct7sab38
SHA256 11e21fbd77f65c83f97c0c2b38c8cd394d5c96fe780188e5c94d400346b49798
MD5 d6e56a3c2d00e5dfd16ccad8542fa739
SHA1 90f3f7b2b44c8f837feb38b5cb14e3fa811f9ba0
SHA512 bedc520c39e7c14e91cd44add774a639a023f9cd0256ed4ec67ecb6f57a9d33c53adb54f390784744f8aba8ee19a419a251ab0215778009e0408084f92a04481
SSDEEP 98304:sAEvotORkSAwEwcgM1HmA5cUkU3nNkH5X5laFhT6Qp5amR28rfJk:Xb2Ackq5XDy6I5TFk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe

File Explorer

731812403191b60503e017d88e23b1a3.bin

.zip 4.1MB
db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe

.exe 5.6MB

731812403191b60503e017d88e23b1a3.bin

SHA256 11e21fbd77f65c83f97c0c2b38c8cd394d5c96fe780188e5c94d400346b49798
MD5 d6e56a3c2d00e5dfd16ccad8542fa739
SHA1 90f3f7b2b44c8f837feb38b5cb14e3fa811f9ba0
SHA512 bedc520c39e7c14e91cd44add774a639a023f9cd0256ed4ec67ecb6f57a9d33c53adb54f390784744f8aba8ee19a419a251ab0215778009e0408084f92a04481
SSDEEP 98304:sAEvotORkSAwEwcgM1HmA5cUkU3nNkH5X5laFhT6Qp5amR28rfJk:Xb2Ackq5XDy6I5TFk
MD5 SHA1 SHA512 SSDEEP

Password

infected

db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2
MD5 731812403191b60503e017d88e23b1a3
SHA1 67e1c24ded75620181916dea9654eeddf4049525
SHA512 1ae78e7d5e134d56ebbe9ec3e71bd7529aedbe5670a93b7728eca0aa482ac6688187884c5a61c2c8ef308acda555152d4d5cd2938d1cfa57303a8649803f01d5
SSDEEP 98304:nsl27OuKr+gvhf2U9Nzm31PMoslkqXf0FvUcwti78OqJ7TPBvc8X6UcR6m:nPOuK6mn9NzgMoYkSIvUcwti7TQlvciK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

5877438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\attat\source\repos\Millenium RAT Buillder V2.8\Millenium\Millenium\obj\Release\net462\conhost.pdb

731812403191b60503e017d88e23b1a3.bin

db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

731812403191b60503e017d88e23b1a3.bin

db874ae685d2bc4235b1213ec9d43d327c8d2bd12300bb0d78c9ce0a84c828b2.exe

mscoree

dotnet