General

  • Target

    fd579cb3e6075e13a6c794c435e46013b75d2931339cd0992a6c39325ed6c7d4

  • Size

    118KB

  • MD5

    385e5e0f86878249a69eabe45cab3a50

  • SHA1

    91d19ce60ddc2bee2f36d9f271afd1fc763e716e

  • SHA256

    fd579cb3e6075e13a6c794c435e46013b75d2931339cd0992a6c39325ed6c7d4

  • SHA512

    190590b95898d3229d8ea6a035360261e04801918f9ee43b3b15e66b8f7dfbb4e66baa97cd95756da511f274ee62a0f88abc22b799951cef2c91622eda89297d

  • SSDEEP

    3072:8GHWMRJGLmwHrBVyDKxW7guGJlouha6opWXEyUwOSM7X4:P2AJGLXVOqW7mb0YXEyZJwo

Score
10/10

Malware Config

Signatures

  • WSHRAT payload 1 IoCs
  • Wshrat family

Files

  • fd579cb3e6075e13a6c794c435e46013b75d2931339cd0992a6c39325ed6c7d4
    .zip

    Password: infected

  • c-users-secretary-appdata-roaming-microsoft-windows-start-menu-programs-startup-jzygdby8m3-js
    .js