Overview

overview

10

Static

static

10

465ebfbf26...a6.exe

windows7-x64

10

465ebfbf26...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    465ebfbf2665eece0ef091d113b07a88de4bcd925cfbc9a4d08b939523a6c9a6

  • Size

    122KB

  • MD5

    c53d2c231de7b11b3cea7893515db84f

  • SHA1

    e5c0ebc4a880d9d7cac3d0debad73f7ae61a4b7a

  • SHA256

    465ebfbf2665eece0ef091d113b07a88de4bcd925cfbc9a4d08b939523a6c9a6

  • SHA512

    7841578209494a006bfb11007f0378ad9f40c4f2ec1722aea42509e868d956e41e3644c9aad41fb791c7f9cf0a71672f39ebd1185ba191c099b6bec4f84f1e63

  • SSDEEP

    3072:64Mr4PdDXmKn1A4iZIjHs1dRH95OwPTGUr:RmB4iT1dlRrGU

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7128957694:AAHNZekiFKhu87NdduDZHCOVdeFFAHP17CM/sendDocument

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 465ebfbf2665eece0ef091d113b07a88de4bcd925cfbc9a4d08b939523a6c9a6
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections