General

  • Target

    Hackus.exe

  • Size

    3.0MB

  • MD5

    9c663208365a83ec2b477cccb6467b48

  • SHA1

    e7b1ade7745edb3728819e91e63cbc8150bef850

  • SHA256

    28d86a07879646a56eb6540184ba97968909b23bcfd85e902ae868521c311e81

  • SHA512

    a61c99646df0b701d1674534e7258e4714f7930f6220f93bdb15ea0c8351b8ea288c033cf388932d18986a0a5005c694933a94abb4f591b76a90867600302379

  • SSDEEP

    24576:Fl66l+Tg33ypYcJ52Ymx35h0s5zQ+6fe05bdgBJrGrdqDwEHK2oJ8BoZecPKeNlb:FLlP3G5KT6W0/KJQdqsF5JcJ+l2VbbU

Score
10/10

Malware Config

Signatures

  • StormKitty payload 1 IoCs
  • Stormkitty family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hackus.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections