General

  • Target

    295abf468b9fe0a935544ef8f1dd3048bb458395ec88011decd5f948ebaea627

  • Size

    71KB

  • MD5

    70f1e7a328be9195b2f73a10de1ca4b9

  • SHA1

    2fb0843ffd6852ab931958ae6d9375a833f1e441

  • SHA256

    295abf468b9fe0a935544ef8f1dd3048bb458395ec88011decd5f948ebaea627

  • SHA512

    1f006ac611ae1130b6f245a51bacfcfb58f5cd01385ca4561d8817eb951daf3312a05fa3966f4598d940b11276a7f7f3a8adeec359978ed43f16179643a9fd4d

  • SSDEEP

    1536:Dk3s21VCAe/TxSYS+q4TjFWL9JdpIAUc:DmVCAExSYHq4FApIb

Score
10/10

Malware Config

Extracted

Family

tofsee

C2

quadoil.ru

lakeflex.ru

Signatures

  • Tofsee family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 295abf468b9fe0a935544ef8f1dd3048bb458395ec88011decd5f948ebaea627
    .exe windows:5 windows x86 arch:x86

    0bdef4d92a94790d7d279561a490c5bb


    Headers

    Imports

    Sections