General

  • Target

    sample1.exe

  • Size

    3.0MB

  • MD5

    feb34584dab15ee2b93405ed12747bed

  • SHA1

    b8e382d5bd00bbeed0541588fc0d840ec1d9ef3c

  • SHA256

    7c81c35dd3a587ceca2ec3fb0e266de3f3c9085d557bd0900847590f714c0b8e

  • SHA512

    e474af31482a950c5673ebab9b4581a23b0780ff948a4291c6b6dbc87794d2c5b52c71c2d75c397bcd7b82dcd580b9634e7282f0230aa71d77c9ff15e2635791

  • SSDEEP

    49152:ILFL0NxianRXZYrkHXFLYgiJiITRf+EGg7dUPtaX5cTQ6k1NJO:0xwkaRXDVLLNPZT6g

Score
10/10

Malware Config

Extracted

Family

aurora

C2

94.142.138.22:8081

Signatures

  • Aurora family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sample1.exe
    .exe windows:6 windows x86 arch:x86

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections