Overview

overview

10

Static

static

10

playitnr.exe

windows7-x64

10

playitnr.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    playitnr.exe

  • Size

    64KB

  • MD5

    fbaa5ba48d31bb17bd15da224f55faa1

  • SHA1

    525587279495f3f79daa053f97607de018ede100

  • SHA256

    ed9b88618ad0d7b90bc1c1557d0d07ccc6c5efb215137d8328c1b23e2ee24d00

  • SHA512

    f4a9363df6a137a9b5fbe7797724745117b04a46bf81473ebbf72bdc2ac65c545a757270d22bb3f2661f3a3eebd6b14ce9495daccca986cd4afd708e53e8634c

  • SSDEEP

    1536:ch3HaMmkefuYjsDAiENQVseNbIB23vYU/Tx:A3GNjsD8YNOavYyx

Score
10/10
eaglerat

Malware Config

Extracted

Family

eaglerat

C2

127.0.0.1:5353

Signatures

  • Eaglerat family
    eaglerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • playitnr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections