Overview

overview

10

Static

static

10

f7b02278a2...50.exe

windows7-x64

10

f7b02278a2...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7b02278a2310a2657dcca702188af461ce8450dc0c5bced802773ca8eab6f50.zip

  • Size

    272KB

  • MD5

    d45f52bae20dc3c69d793b4e9cb8f1e4

  • SHA1

    4ad7751e41dd82248c36de9b8a07c3f8609a9747

  • SHA256

    27ba6d686db735916061498a56b3a43e4791ee455fabf4caed05db1929f28e6b

  • SHA512

    15adc0c154e591b47286b30cec0de5e278b02a19ce4458cb740b238dbcfc7a5115e83e898e3a925970e482f1b69dd92a8458f1024a7a92099526e5fda44082e0

  • SSDEEP

    6144:Lfb11rqzrdA5QHwWlAZfzRU/RQbTH6bk04YTLuyLk3ii:rb112zxHwCr/RQbT2k04CSok3F

Score
10/10
gurcu

Malware Config

Extracted

Family

gurcu

C2

https://api.telegram.org/bot6104192483:AAFCcnr4FR2XCO83zUSAWWZ9J3qw4tRYQoI/sendMessage?chat_id=2076277850

Signatures

  • Gurcu family
    gurcu
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7b02278a2310a2657dcca702188af461ce8450dc0c5bced802773ca8eab6f50.zip
    .zip

    Password: infected

  • f7b02278a2310a2657dcca702188af461ce8450dc0c5bced802773ca8eab6f50.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections