Overview

overview

10

Static

static

10

ad9c3a743a...73.exe

windows7-x64

10

ad9c3a743a...73.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad9c3a743ab48629ef8b02e26c82cb0f497669d8ae3b236758f997f695e78c73

  • Size

    111KB

  • MD5

    6c2c7ef5b5716d674991e364750ff233

  • SHA1

    abce149b0532326458909c21e6e13063a92f3251

  • SHA256

    ad9c3a743ab48629ef8b02e26c82cb0f497669d8ae3b236758f997f695e78c73

  • SHA512

    cf673f324030bb23bfce9e09d3c8d10ceb108fb962557a141f1200d31e89ec4e4c1654d3d6c0657eb38ba4942ab0cc6a7bfffd6159c8d989214c6b94350113ea

  • SSDEEP

    1536:L66Cxsr7any9okBEO623Dnii5/u/TMhDLLUfmK5eR+2yMV:Qx6any1EO623/5G/Q1LQmK5eRFt

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot6861530662:AAFueJRxaIZGz_oVT2-CVuuL9N0MRsh-5_Y/sendDocument

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad9c3a743ab48629ef8b02e26c82cb0f497669d8ae3b236758f997f695e78c73
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections