General

  • Target

    Client.exe

  • Size

    158KB

  • MD5

    e3341ad596ed6da038c798b1fee80556

  • SHA1

    35605ab4ac5b1dc51d833dc7175d6d0799868989

  • SHA256

    f2da736864510afba0fde1579316395f4566408d14f7aaac6776feee79cbf589

  • SHA512

    4a56f3af287723358a402024fbcfee23a6160e470c853c93473a7343687d19698cfb87d600b68209d58a1329413cd2b2200e571470b130ce832ab69dae80530e

  • SSDEEP

    3072:hbzIH+0OoCthfbEFtbcfjF45gjryKKqH6JY2doszEmQotEPPcfPtqO8Y:hbzIe0ODhTEPgnjuIJzo+PPcfPtV8

Score
10/10

Malware Config

Extracted

Family

arrowrat

Botnet

Client

C2

147.185.221.21:35374

Mutex

SROLcnhMO

Signatures

  • Arrowrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections