General

  • Target

    f700c7059dcb4db8b23e7f31ec135b7b.bin

  • Size

    158KB

  • MD5

    7ff994ac6cb2564ede94cc70f7c529e2

  • SHA1

    08960d10795555f7bd48215ce58410830ed4914b

  • SHA256

    137596e6de74907857a5d4e94484ba638ac520d2c866910079eb98d24530a7c2

  • SHA512

    479b49635b2e274652882c23e225294aba94bb675fdfda024eb306cec07946e7487a0617481ce0f639f16d9df677996ff2abc19a588aa9e28b870b5ac7ce66db

  • SSDEEP

    3072:V7lZA+uJwow9k77/PllFeX36r58yY4Jk1wYjs/lU0Iux5i1VSY/DicGU:V7Rlo3l/8yY4k2Y4h3i1q7U

Score
10/10

Malware Config

Extracted

Family

observer

C2

http://91.103.252.17:8912

Signatures

  • Observer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f700c7059dcb4db8b23e7f31ec135b7b.bin
    .zip

    Password: infected

  • b5e6dde637ff9dbc4dc8602c2340a4697009e2e4f1d876b9aaa6d7d0608cfcc6.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    34fc5754badd722e29654c8e5ce4f927


    Headers

    Imports

    Sections