Overview

overview

3

Static

static

3

files/arpspoof.exe

windows7-x64

1

files/arpspoof.exe

windows10-2004-x64

1

files/rpcdump.exe

windows7-x64

1

files/rpcdump.exe

windows10-2004-x64

1

main.bat

windows7-x64

1

main.bat

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    hitbrothers.zip

  • Size

    84KB

  • MD5

    ba29a4c2215337d6bd3ce87ce0a42e0d

  • SHA1

    935cd04664184be2185dad72aa07d1341fb354a3

  • SHA256

    04990fd60289b904df54d09c554e2875da1c39a42c6f33fa8e8e0af2a3612654

  • SHA512

    38f6a5952e870a27991c226e7169faea0c52599cfa700c7b1af7a2421fd37c6fcc773ff54c73b9c54552c82a9852a68b28faed307b40cf0b23ade3a56efa1344

  • SSDEEP

    1536:FBqipEvoH5GF4UrJp3M63Yyf16yqfAsTH5hgfRaq9Na0BnL+x:FBhpCiQTs61wyIWnq0BnS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • hitbrothers.zip
    .zip
  • files/arpspoof.exe
    .exe windows:6 windows x86 arch:x86

    db39bcfd64fb69b68c8b29c670a6f606


    Headers

    Imports

    Sections

  • files/rpcdump.exe
    .exe windows:4 windows x86 arch:x86

    2b3e005a8cabe02178143b87ae97ba47


    Headers

    Imports

    Sections

  • main.bat