General

  • Target

    Microsoft Windows Search Filter Host.exe

  • Size

    99.2MB

  • MD5

    05a8017ad16fbfe6dfe099bc1125f8fd

  • SHA1

    f75e3a46e618721498d270c90aa2b515e676adb4

  • SHA256

    eb7412965321c55ea14edefda1137b8e3f448b916243de12602f66152a3ebc01

  • SHA512

    7db7a6c413d96506d768a8f1133eafb72ecc2601c47209c3a9aabb3238fcbcdef7df70b79755d28bcadfc7d684168bc326262315af16a70d86ae4baf4bb26fd5

  • SSDEEP

    3145728:agYRPSC++6y9Ji4Et/VG6RmtCRlGPreT2qHO5iqSv2:axaC4y9hE5mERluSZHCidv2

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Microsoft Windows Search Filter Host.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • DiscordRAT.pyc
    .vbs