General

  • Target

    BitcoinHunter (infected).zip

  • Size

    147KB

  • MD5

    cc99c5b1f96fe09ab425a914020006fe

  • SHA1

    2153e5bcb933c2cdd34f8213fd9b2e08a9320990

  • SHA256

    b9e724730282edffa71360eba20d3d461bdda32ec3445571a27a57ea75ef6c81

  • SHA512

    4b2b24396f8a6d48ae1801cf8329db75af05f9deb56a00767e552dcdd5d9efdefa12eadc1c769ab2c45a11fbbe544b65a67515fffcf3617659fe69d82881d9ee

  • SSDEEP

    3072:gCRqpLqES0GqZps40RyNLNvT8Lie4exFVl+TeTQOvPD6JebfJun:gjjS0RZaRyNLlT8L4K8+D68bfJun

Score
10/10

Malware Config

Extracted

Family

darkvision

C2

45.200.148.238

Signatures

  • Darkvision family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BitcoinHunter (infected).zip
    .zip

    Password: infected

  • Hunter.EXE
    .exe windows:5 windows x64 arch:x64

    Password: infected

    6ec52816fe4a1f404eaae46e8a806d5f


    Headers

    Imports

    Sections