Overview

overview

10

Static

static

10

24bb4fc117...8a.exe

windows7-x64

1

24bb4fc117...8a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a.zip

  • Size

    139KB

  • MD5

    3004d59caec002af3783d74a885bb5d0

  • SHA1

    a22c2838f5c50396ef46fe8228fdb198ac8980f3

  • SHA256

    e73f9b0d3f049bb0735180949bb9a089df5a1bc29144daf6143ecc05f1daa07f

  • SHA512

    71ae2a5f564f5dab118d9277d926ade7b38b7aaaef4bd7078ff1848e292879e9531a3c3b576dea469e71e962c5aa4ba020977bb4d80c9b2c37bf50435abacb00

  • SSDEEP

    3072:l1Bs3uLHIdnX1GgjroFwptUTwExpUyZ+TU5XLQdQSbKI4:PBseLHSOFI2/Z+w1sg

Score
10/10
observer

Malware Config

Extracted

Family

observer

C2

http://5.42.66.25:3000

Signatures

  • Observer family
    observer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a.zip
    .zip

    Password: infected

  • 24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    b8de15954925e9e1385222064bd30fad


    Headers

    Imports

    Sections