General

  • Target

    Orebina.exe

  • Size

    115KB

  • MD5

    31089248441686da3544ef1350ec2faf

  • SHA1

    5aa6dd8292d6d0833ea534fe09027c091b6fe63a

  • SHA256

    c6042dd27158b9a6a562fa1a3ba404ffae2c730ee456045085180630d9ae86de

  • SHA512

    2914fb9341a2eb8f3f2d84f0bf24d896c0bf7ca91911a2acfa15010f16d262daa5aa041029dd3f155efa72132a5e58c9376f992711f30ab22d30026d24522252

  • SSDEEP

    1536:IB0vtXMLiZV3RXYo/qR8jjjjejs6j49P5HKGbO0zde40tTjm:AatX/Vh/qRxjljQ5qwVzdv0k

Score
10/10

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7019725350:AAEhQbYUNpUyzR9x63JtjaQkZtA0YVPYtN4/sendDocument

Signatures

  • Phemedrone family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Orebina.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections