Overview

overview

10

Static

static

10

3008-27-0x...ry.exe

windows7-x64

3008-27-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3008-27-0x0000014EC8F70000-0x0000014EC8FB4000-memory.dmp

  • Size

    272KB

  • MD5

    da1edc2204657671d223bac411456f58

  • SHA1

    b23fd049d3d023040e13439140f372d0cb7966a9

  • SHA256

    e5426bc23b2c8075a3fc5809b7bdbe69e68b946ebfeacbacdb098aad69083602

  • SHA512

    b4f8cafd309e31e6859c0f0a97320acd822c49650728565b009097002594d8b306ca2e9745c935332977ebbcbbb1b9e8a5da447db314d55448f24cdfef968a1c

  • SSDEEP

    3072:plXc8ISCQhQzh6OVoWlq5OiUG5QivXsP1zpKHDkO7UN2ET:XUSbSzh6OzgOiUOvrU0

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot8091768794:AAFZsJ1h-6BiszgyLm-eH6c-uITQ7Z99Wbc/sendDocument

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3008-27-0x0000014EC8F70000-0x0000014EC8FB4000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections