Overview

overview

10

Static

static

10

BangerKill-Origin.exe

windows7-x64

1

BangerKill-Origin.exe

windows10-2004-x64

1

README-FIRST.ps1

windows7-x64

3

README-FIRST.ps1

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    92fc29b30aead97fc537d6a659b01bda4b1ea8edaadc6ef5ed9d1c489d66cdde

  • Size

    1.1MB

  • MD5

    f2a7a9ccd7140a2d44245d23279d83fa

  • SHA1

    2a999b4fef378fa3118cb4977de93f201d329408

  • SHA256

    92fc29b30aead97fc537d6a659b01bda4b1ea8edaadc6ef5ed9d1c489d66cdde

  • SHA512

    d9befcbe22fda1982861d369ee8b6e4add50c3314d41ecf3e4422dc0a37abb767b5a27e2a0f6005c08f322ca43913697df83c49ead677f8eff6daad56fc3000c

  • SSDEEP

    24576:+EBtc5mlgULrHjHedUbeq8l0psdUfwT169umvah8n8c5/imn/LHl:HBm8ltnzKq8l0uTc9psy8c5K4TF

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

http://tofnz6v1vsxa4ve3q1t30hsq7.kesug.com/ukljps.zip

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 92fc29b30aead97fc537d6a659b01bda4b1ea8edaadc6ef5ed9d1c489d66cdde
    .zip
  • BangerKill-Origin.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • README-FIRST.ps1
    .ps1