General

  • Target

    win32_remote.exe

  • Size

    704KB

  • MD5

    2783a76f46f07b45dcc4514bd67daeb4

  • SHA1

    a2ec57d564f9b29cc9798ddad730ecda0af4fcc0

  • SHA256

    9ca85bbfed42b252002390fe9c5dbbfbe2e76c6e69f681204dd1d403b8f1ce2d

  • SHA512

    00c25cff3239d5b7dc091340468228911eeb3037024feb0029eda2d9e4632dd5c603936d084ee47da0582e10d19e7e697574682fcb3e225c932be693282ebbc2

  • SSDEEP

    12288:I0M5551VeifM4D9ohl4wjiVzRuWFpSte+cgKlT701zbR/zLsi5VmBiJ8RLYTlIP:vEvJHzRiFcgwf6FsiU+8RLYTCPPdoJ

Score
10/10

Malware Config

Signatures

  • Industroyer 1 IoCs

    Contains code associated with parsing industroyer's configuration file.

  • Industroyer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • win32_remote.exe
    .exe windows:5 windows x86 arch:x86

    5555d6854cda03e02340917da5096fe1


    Headers

    Imports

    Sections