General

  • Target

    552708c436696f90f45a1e37db90ea90N.exe

  • Size

    116KB

  • MD5

    552708c436696f90f45a1e37db90ea90

  • SHA1

    4470d1182f2587a1f9cd974e712929660234fff1

  • SHA256

    24363ff2948bd9a78635471498e899306edfff82ab96d1b977a564ef2eae5b41

  • SHA512

    116408995058a015137aeec14490468470dd241175b917ef16b63ab1b324e265d26db221693b4b858e43b67a57084383b0bbebe245a3ff8391aef24b57c63e85

  • SSDEEP

    1536:7QEQ6Or1v0eEW32jrMP+Uo8ZPp+8y6OG60Ee5K3QC/xxx3pZzHNoriwoQAhL8j:ErnhBagZQ8HOSEe5rC/xxnZztwj

Score
10/10

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7206720228:AAEBZdduavQnTtKEU_zzcbsBpsX39gH7twg/sendDocument

Signatures

  • Phemedrone family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 552708c436696f90f45a1e37db90ea90N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections