General

  • Target

    cb1dd3361ce78f91bfea9a8b0c50bfe99fc08cc97fd7de0f4bdbe69c49907c14N.exe

  • Size

    147KB

  • MD5

    de501b09e2cb8522b871a7dd74c091d0

  • SHA1

    8e0bb24869d6e054f8966236dc64551ac7d54943

  • SHA256

    cb1dd3361ce78f91bfea9a8b0c50bfe99fc08cc97fd7de0f4bdbe69c49907c14

  • SHA512

    1ee22bf90484b28179bc4badd1466604904f98ebbd3c7d727943005800336d04e710ee46e01e5112fbe4093ada5214b9dd43dc76499e7efa309375e9c246e4ad

  • SSDEEP

    3072:BJ8oH3egdVjHBqa+1YJJlXc1h40up558IsQBslNee3:Yw3egd5wV1YJJlXc1h40upLBslA

Score
10/10

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot5942488573:AAF1vG_VjN_6u_kG-5DCN2A38cJEKwUh3Oo/sendDocument

Signatures

  • Phemedrone family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb1dd3361ce78f91bfea9a8b0c50bfe99fc08cc97fd7de0f4bdbe69c49907c14N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections