Overview

overview

10

Static

static

3

2017-01-01...mp.exe

windows7-x64

10

2017-01-01...mp.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2017-01-01-pseudoDarkleech-Rig-V-payload-Cerber-radA2306.tmp.bin

  • Size

    226KB

  • MD5

    5325d9eabaad0ae40d2c586e6bae6467

  • SHA1

    1b3a32c10ea3034f1229faa5fc4b6c9fc7b687b0

  • SHA256

    aceac1915f214f9d075751092dd8c4ea3ebde5da355ebeffce5ddee6c3e4fe48

  • SHA512

    452fa48a4b1622eb9d32460917918efb0e4dd8ef0304ee435650c5df6ccd85e3c1b94d5bebf0d84b821f210d628ad75b9e6a1eb1cdca266c089696c937c11104

  • SSDEEP

    3072:MAe+3aJpgWXTBucMzjrRe5bklV1CZXYXFQzg1Yl0xiR/EU1KsIdoWxMBWNQ3ZJJ0:PB+pgUubguVcrcm0u/10/dRgdzs/j73

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2017-01-01-pseudoDarkleech-Rig-V-payload-Cerber-radA2306.tmp.bin
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • germanflag.gif
    .gif
  • icon72.png
    .png
  • macmade.gif
  • rb.gif
    .gif
  • spray.lGu