General

  • Target

    Iguduvu.exe

  • Size

    115KB

  • MD5

    d6dbf35249ae335417b2a86f7bc41db5

  • SHA1

    37bd62f70e66087b0ac7b46fee343f25bde8534d

  • SHA256

    f17e66a90dfa250f34f0d8fe42e57911a348b6adc08b13db3765e2259a051b62

  • SHA512

    ed952bd9c21331a60729fd8b5759fb57a5db56ba02f2db8fe905a3166e88d2b7dbd6cae9a368fd250ba1c3afdc5dfbcb6b46f5983ed011d869ed3c848405207e

  • SSDEEP

    1536:F0vTeZhDyUJZi3RFKfbNjKQauE7+z6WksjD15aE8Te/rC/SZpcAdpiXCsMx+VSFb:qv6ZheLsbN5bEHWko15aROrA6RoM

Score
10/10

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7383063637:AAFyD9g219vkZhknsRfJlso3402h_1hs7xE/sendDocument

Signatures

  • Phemedrone family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Iguduvu.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections