Overview

overview

10

Static

static

10

a1501e6b14...7d.dll

windows7-x64

1

a1501e6b14...7d.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1501e6b14e5864bbdb4befbca52c4d588bba497f7afa45c474f24950d5a4c7d

  • Size

    285KB

  • MD5

    a5a5b2adbc334ae89f36ae44fc8dceca

  • SHA1

    532e808e425e1dea719da735290a2df61c3841d3

  • SHA256

    a1501e6b14e5864bbdb4befbca52c4d588bba497f7afa45c474f24950d5a4c7d

  • SHA512

    1b5a5149179ce67951a1c6d10714c6032bc6a8e648d397f0d04b0812aac832999ea55a0caa35540c0d0bbd6acf4b6de5cef9b5cd5162a4e447d5909f98a7f5ca

  • SSDEEP

    3072:Dwqo0Fa1b98zqFPh04uSox5W9jhJllihoNwXzM0/FIxqqfPt4/ONRdkxR6foY46x:DlofFZ01x5IhzkhoNwXY0/qtD1oh/

Score
10/10
tinyturlang

Malware Config

Extracted

Family

tinyturlang

C2

https://thefinetreats.com/wp-content/themes/twentyseventeen/rss-old.php

https://hanagram.jp/wp/wp-content/themes/hanagram/rss-old.php

Signatures

  • Tinyturlang family
    tinyturlang
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1501e6b14e5864bbdb4befbca52c4d588bba497f7afa45c474f24950d5a4c7d
    .dll windows:6 windows x64 arch:x64

    2240ae6f0dcbc0537836dfd9205a1f2b


    Headers

    Imports

    Exports

    Sections