Overview

overview

10

Static

static

10

b5e6dde637...c6.exe

windows7-x64

1

b5e6dde637...c6.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5e6dde637ff9dbc4dc8602c2340a4697009e2e4f1d876b9aaa6d7d0608cfcc6.exe

  • Size

    278KB

  • MD5

    f700c7059dcb4db8b23e7f31ec135b7b

  • SHA1

    5f396e6e296ad01765c0e090dbb0130698531b91

  • SHA256

    b5e6dde637ff9dbc4dc8602c2340a4697009e2e4f1d876b9aaa6d7d0608cfcc6

  • SHA512

    93f98687c55f6d1d6e58a42b8fe8de9ef8e5a7b0d9cefc9987d3d94b5332f1ea3672aefb97ae8aaf37a8b078a4206d83c4550f7fc2a0e58105d55f9fd3afc256

  • SSDEEP

    6144:DOfB5WbIkhMXcZhRbW5mZceS2mlAOYE/u:K5cMsZXVAlqE2

Score
10/10
observer

Malware Config

Extracted

Family

observer

C2

http://91.103.252.17:8912

Signatures

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Observer family
    observer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5e6dde637ff9dbc4dc8602c2340a4697009e2e4f1d876b9aaa6d7d0608cfcc6.exe
    .exe windows:6 windows x86 arch:x86

    34fc5754badd722e29654c8e5ce4f927


    Headers

    Imports

    Sections