General

  • Target

    e1813b54272346a48364e789cb04bad5e292cbf3cc16057dc6435e965b377c0c

  • Size

    48KB

  • MD5

    d83cac8ac77e88472b7d1a46b4bdc006

  • SHA1

    ae5b4606463ca36ae8785bfcbc47cc4dee9b1fb0

  • SHA256

    e1813b54272346a48364e789cb04bad5e292cbf3cc16057dc6435e965b377c0c

  • SHA512

    a1460605dccd2540394f8f3ee8ec0c2e1ffd8ffe42c25f72470089da247ebc7ef1587372847e42bab901dbdf665596dfd658b44ac04ae1d0f2adb8165be2922e

  • SSDEEP

    768:zynb12Aw5J6HC4kq5Jp9bjAzhyY55J+NStcEeUlyqgZl4p67QhPC:Ub1MsHz3JDwhyWr+N95OTga67

Score
10/10

Malware Config

Extracted

Family

runningrat

C2

120.79.191.234

Signatures

  • RunningRat payload 1 IoCs
  • Runningrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1813b54272346a48364e789cb04bad5e292cbf3cc16057dc6435e965b377c0c
    .exe windows:4 windows x86 arch:x86

    24ffff844f7eed74e1f1064cc9840ba9


    Headers

    Imports

    Sections