General

  • Target
    9663cb27096c5592837253411ddee56a54b84b1851cd77e7b33768091ef26fa2
  • Size 16KB
  • Sample240320-c3c8raeg63
  • SHA256 9663cb27096c5592837253411ddee56a54b84b1851cd77e7b33768091ef26fa2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • purecrypter

C2
  • http://41.216.183.153/no/dontlook/re/research/Kofdzsxxr.mp3

Signatures

File Explorer

  • 9663cb27096c5592837253411ddee56a54b84b1851cd77e7b33768091ef26fa2
    .exe 16KB

9663cb27096c5592837253411ddee56a54b84b1851cd77e7b33768091ef26fa2

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 9663cb27096c5592837253411ddee56a54b84b1851cd77e7b33768091ef26fa2
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
37:e9:64:f3:43:bb:a5:15:8d:fe:12:ef:66:2e:20:78:c4:fe:ec:9e:a2:fc:96:cd:41:29:af:98:48:1a:cc:1a
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains

Mar 16, 2024

Minor OS version
0
Major OS version
4
Entry point
11746
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths