General

  • Target

    Physiological_Client.zip

  • Size

    2.9MB

  • MD5

    62dd61b23d09d01d34ef071b9c4dae5e

  • SHA1

    b582efd323bfb92aca8bacab15b34ec27ab3f679

  • SHA256

    daa8da374a7733265d53152a6fded97c669f964a6881f2310c8bbc3921488a3f

  • SHA512

    bc96f56f703527e5b5556c17d2aeb6a530a2e357cb062d7da6097c03d75206c3990b3400786fc430ec49235380622eb3f2d7921acd48600d8c1d162884fee764

  • SSDEEP

    49152:edBxbN9BZGsYBO6uY/Sg4MglGMhKhOkIsuEepI8vx+OIfZSsA6ojT23T:KN3BZGUA/tB7hOkIXjpI8RIBvbp3T

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Physiological_Client.zip
    .zip
  • Physiological_Client/Physiological Client.exe
    .exe windows:6 windows x64 arch:x64

    03542a0ccc80c82441f4a9e87b79dbe9


    Headers

    Imports

    Sections

  • Physiological_Client/README PLEASE CYDE.txt
  • Physiological_Client/WinDivert.dll
    .dll windows:4 windows x64 arch:x64

    0b649f8e17494bb31b47f6e959a1769c


    Headers

    Imports

    Exports

    Sections