Resubmissions

21-07-2024 23:01

240721-2zth1aygqh 10

21-07-2024 22:53

240721-2t6w5syepf 10

21-07-2024 22:42

240721-2mpz2s1bpp 10

14-07-2024 16:04

240714-thz1fszcna 10

General

  • Target

    47a82ee0e0113c92b2c35e744ac720814320975fe5684bc19a6c6984802fd21e

  • Size

    144KB

  • MD5

    6945668834c3c7223d4d98e0e89428ec

  • SHA1

    a6d6bf5bdeb785c35e6fbec7d5464887076fcf4c

  • SHA256

    47a82ee0e0113c92b2c35e744ac720814320975fe5684bc19a6c6984802fd21e

  • SHA512

    4695251deb6f4f4a87d13a8a714907ba309820904298765344531a5c655d97fbcd4b5df95ec5d0a2d1a03256115bffed074a77a17f6b8c8c3e727b26f1b1617e

  • SSDEEP

    3072:9DLhghNC38S7gzQ/cVD4U7p82jMU0Lt/w/HOWJbG5vcX++kwEKEAW31D4:2zQ/L6Mbw/uWJbGF+REKA1

Score
10/10

Malware Config

Extracted

Family

nightingale

C2

80.76.49.148:3999

https://api.telegram.org/bot6813766312:AAGyxmK0E-SiPNsQCpjEIFZJIOhZnrPLxhw/sendMessage?chat_id=6467170572

Signatures

  • Nightingale family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 47a82ee0e0113c92b2c35e744ac720814320975fe5684bc19a6c6984802fd21e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections