General

  • Target

    AAservices.exe

  • Size

    5.2MB

  • MD5

    b6d4cf90524ad23f23b424d2fc026301

  • SHA1

    4350535f3206ea439d2d320b06eaa0ab9141406e

  • SHA256

    519bcced29022f139097cc2c56c9e3489329bb63017f202dd15b5234c2d76d0f

  • SHA512

    6ccfd3376c47d1dc0615ce54adef257b69398b61c8cd9ec89044150d0c027eb6ee54e8955a34b953b849f935265f846583e30ca414e493f397cbb94446540910

  • SSDEEP

    98304:5v6FYeZ3vFpkRmGWoTxi0wGGzBjryX82uypSb9ndo9JCmVq2q:QFYeZ3vFpkRRdwB3ys2uypSZ4JCEq2q

Score
10/10

Malware Config

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AAservices.exe
    .exe windows:6 windows x64 arch:x64

    ba7ea63af7a7301d263e3a8b2813b978


    Headers

    Imports

    Sections