General

  • Target

    Client.exe

  • Size

    158KB

  • MD5

    ddd78d5b177c9515d2e8fb3e2c0d3ca2

  • SHA1

    cfac443e8eaf2b855a109a53ac1cdd041bbb64d1

  • SHA256

    35d8f56cdb6c9a6b6ddbc00374a69a147f691d6640f7c199199d321bf1ec6923

  • SHA512

    d6e2793bca32d98a1ec3be6b82d2f7c2225ed756cb3761d6b921588b99bd6e7fefa261fdc16907074e8f23be96563bc9c94b148e8f23425760d3d955139227eb

  • SSDEEP

    3072:abz7H+0OoCthfbEFtbcfjF45gjryKKqH6JY2doszEmQotEPPcfPbSO8Y:abz7e0ODhTEPgnjuIJzo+PPcfPbN8

Score
10/10

Malware Config

Extracted

Family

arrowrat

Botnet

Client

C2

99.83.12.91:1337

Mutex

mfrPoMrhW

Signatures

  • Arrowrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections