Overview

overview

10

Static

static

10

Resource.exe

windows7-x64

10

Resource.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ResoureFile.zip

  • Size

    138KB

  • MD5

    6174ba506514ec4b51459759c8d0f0cb

  • SHA1

    4c6340680c3ddaeae06d1a8cd34dfbba2de748c5

  • SHA256

    f22347457dcc1547a18a9aa2526dc2d355b4af14ebc468c0ac56ba1f1084041f

  • SHA512

    799ed2e2ed3837604edd51119424dbc749938a207cd414fa5a709f6b2eef7d9c2195e3b1ffb69a59242190dcf123113b21e895fbee0543e7d74f41abc5729df1

  • SSDEEP

    3072:LLykyx2xrZAoxRwUMlhFoi95j3pyI69Nr3tg+x5:RyKrZAwRwtHFB9Z3pyr3th7

Score
10/10
phemedrone

Malware Config

Extracted

Family

phemedrone

C2

https://mined.to/gate.php

Signatures

  • Phemedrone family
    phemedrone
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ResoureFile.zip
    .zip

    Password: mined

  • ReadMe.txt.txt
  • Resource.zip
    .zip

    Password: mined

  • Resource.exe
    .exe windows:4 windows x86 arch:x86

    Password: mined

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections