General

  • Target

    58b3686e4255d32dbcf7dee9dac1d5be6d4692d086cde167da1e1a5e0e1b315a

  • Size

    6.9MB

  • MD5

    d510808a743e6afc705fc648ca7f896a

  • SHA1

    b212220ef2ed13514e54ed3aa8ee0eaafe7495ab

  • SHA256

    58b3686e4255d32dbcf7dee9dac1d5be6d4692d086cde167da1e1a5e0e1b315a

  • SHA512

    3ccafcf04701eafe35a47fb2bfdadd581123ccf99f5e13884b2102845c0c00a2a9eb61af24bcbf96204627b2577d948336f890ff73e17398524c06fa955324f3

  • SSDEEP

    49152:o7QodfzNxUtaS3xDgEhtBodUR1VeL3RVnAPmK:oQodfktagxDgEhtBFR+TRV

Score
10/10

Malware Config

Extracted

Family

warhawk

C2

146.190.235.137

Signatures

  • Warhawk family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58b3686e4255d32dbcf7dee9dac1d5be6d4692d086cde167da1e1a5e0e1b315a
    .iso
  • out.iso
    .iso
  • 32-Advisory-No-32-2022.lnk
    .lnk
  • 32-Advisory-No-32-2022.pdf
    .pdf
  • RtlAudioDriver.exe
    .exe windows:5 windows x86 arch:x86

    b4b268d91f4a71a97804395b5b37e74e


    Headers

    Imports

    Exports

    Sections