General

  • Target

    Client.exe

  • Size

    158KB

  • MD5

    b0e4bd2a0ae239b56802a213e420d374

  • SHA1

    7cb945ab693f92094031f99274ce58b5887e54cc

  • SHA256

    b3a46d84a821e762923de3ea33e408018c73d739e2ebf10a411f2eddaaff17f1

  • SHA512

    da7fd77f9c460e06ca28e97a198a9ba02adda1437daba08c1fd7c5e4456b6ad8d88d4a0ef581e7adf0ba65c686dcfbdd8c3ee0ef4929aa00ab1010866fd640f1

  • SSDEEP

    3072:gbzDDH+0OoCthfbEFtbcfjF45gjryKKqH6JY2doszEmQotEPPcfPiSO8Y:gbzDDe0ODhTEPgnjuIJzo+PPcfPiN8

Score
10/10

Malware Config

Extracted

Family

arrowrat

Botnet

Client

C2

147.185.221.21:37029

Mutex

dqeqvDOqo

Signatures

  • Arrowrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections