General

  • Target

    d5b1e2cec0d590b3d6a8809c940b5316688ce0c8af9fbf8a42baf27888d971d5.exe

  • Size

    160KB

  • MD5

    50acfb26d39aea301a42692d269b0577

  • SHA1

    d92ece0badc23dc4562dbe6dbcd1c9f47812c6cb

  • SHA256

    d5b1e2cec0d590b3d6a8809c940b5316688ce0c8af9fbf8a42baf27888d971d5

  • SHA512

    d72c7410dfac81258ec79b03b53bda756c7b8a365ca6ac5e9578f105f69cad4911357395f5e088f9e6ddd48ff968809119556d349ea47b917168f7a3f5526430

  • SSDEEP

    3072:+39emuxx5Ph+Nrlp5LoVpbDM5M5TM+jso:+3UtZe+LbDu+Q

Score
10/10

Malware Config

Extracted

Family

nightingale

C2

https://api.telegram.org/bot7360773915:AAGMf_A9lvN1HakLmVWWp2591SJduhueehE/sendDocument

Signatures

  • Nightingale family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d5b1e2cec0d590b3d6a8809c940b5316688ce0c8af9fbf8a42baf27888d971d5.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections