Resubmissions

14/11/2024, 14:26

241114-rsbpha1ame10

11/05/2024, 00:32

240511-avxw3sde7310

General

  • Target
    2024-05-11_9effd1061ce70c7ab88195e24ca5f431_mafia_olyx_rekoobe
  • Size 1.8MB
  • Sample241114-rsbpha1ame
  • SHA256 e38c8b592f5647e8117a0439902d7e3280260fb5bac548a11cf186eed3f752e3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Rekoobe family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2024-05-11_9effd1061ce70c7ab88195e24ca5f431_mafia_olyx_rekoobe
    .exe 1.8MB

2024-05-11_9effd1061ce70c7ab88195e24ca5f431_mafia_olyx_rekoobe

  • IMPHASH 24c3a87b4f27fb5f988ae0214e2fe9f0
  • SHA256 e38c8b592f5647e8117a0439902d7e3280260fb5bac548a11cf186eed3f752e3
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
1062772
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths