Overview

overview

3

Static

static

3

bbad8c8011...39.exe

windows7-x64

3

bbad8c8011...39.exe

windows10-2004-x64

3

$TEMP/pprest.exe

windows7-x64

1

$TEMP/pprest.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bbad8c801156d344e944a3ea76069639

  • Size

    3.4MB

  • MD5

    bbad8c801156d344e944a3ea76069639

  • SHA1

    65f18fe43f62afc04a0c461a91192a5f80e9d91e

  • SHA256

    62f0eb1d8409931f968fb7d6e7e538fbbb7d821331a3df2fa36739f9957c80a7

  • SHA512

    3b5d247fe618134ce3bbf00a8c57376387d28a94ca28e4041174fefddaab4cf3b7479c05042f1f153d92006570b78e68a9cbd7411c57c876bc44da39b3628ec7

  • SSDEEP

    98304:KVxG55xdxTZPFXtH1HWtvQBvu2yHK7XnCIDemS:KxG5p3R2tIBvuLH+Cuu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bbad8c801156d344e944a3ea76069639
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $TEMP/pprest.exe
    .exe windows:4 windows x86 arch:x86

    899d30f70fe6a074a5e8be56a6462649


    Headers

    Imports

    Sections