General

  • Target

    Zuma Deluxe.exe

  • Size

    6.9MB

  • MD5

    0d7243c3e9eefa5e30c04453623c9182

  • SHA1

    f53f043451ad77189616ef823d9d27c9f089a8f7

  • SHA256

    08f9ea9a663a5d463b017f8829a8ae6f875f75653433099f803c82188270eae0

  • SHA512

    bc40fd2dfdb764161f185932b49727c8545456e1c0f2060801095fa7f4ed0d1d0eadba9e425d6ec000bc06977766d94ad637ea231642475d8531e2c94a6c442b

  • SSDEEP

    6144:nHdmxc2EKy9TVDbTi+TAJigC8tYQztwNTOcaOPgOEU20Rz:nHdSyDP4YQRwJOcFPgO1

Score
10/10

Malware Config

Extracted

Family

phemedrone

C2

https://rakishevkenes.com/wp-admin/admin-ajax.php

Signatures

  • Phemedrone family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zuma Deluxe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections