Overview

overview

10

Static

static

10

6f9f9973dc...88.exe

windows7-x64

10

6f9f9973dc...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f9f9973dc9c24d10c4a5678b48d57780b6399408f20bc8c074a73f86fc0fd88

  • Size

    138KB

  • MD5

    67c60845c275b4c27e958c31b2129001

  • SHA1

    9cda03f7fb8b88ac08d61325712a55c34fa3ca86

  • SHA256

    6f9f9973dc9c24d10c4a5678b48d57780b6399408f20bc8c074a73f86fc0fd88

  • SHA512

    72831fd0a4522bcacd03ca1dff78844240aeed2a2f430aaa2f290cb06427d42c03f9b546c980e3331f48156f9b8404daaa6ddfbb16e294006b2f22ebb9e21bb1

  • SSDEEP

    3072:pGyxO6HAjmjaa8OPkVw36ieKn5I3UQ8X/L:FOeAija0kVw9

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7399565450:AAHi_hMDEnRAdqS1R6s83tRv7BKyLi6xLyE/sendDocument

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f9f9973dc9c24d10c4a5678b48d57780b6399408f20bc8c074a73f86fc0fd88
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections