General

  • Target

    Hackus.exe

  • Size

    3.1MB

  • MD5

    70787feaf9b8720abbd483c657d7a1b0

  • SHA1

    9ce52f7b5ff2b4dadbe12694391b76d3a82d121c

  • SHA256

    0613d9d0dda0d03efe4dd9876834c8234b54b7d2f406fe8dcc66e799eeb5a640

  • SHA512

    9c105e63b5c12f94b80d0668fec63736fad97a13cc49fed6c7715715d4519f38d558fbde431b73153ef226aeb6e211ad1a8e9cc5c69b8fdec31214005c612d36

  • SSDEEP

    49152:kGlP3G5KT6W0/KJQdqsF5JcJ+l2VbvbUGH8wb6i:kb4T6LEsBlM+lQ3B

Score
10/10

Malware Config

Signatures

  • StormKitty payload 1 IoCs
  • Stormkitty family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hackus.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections