General

  • Target
    6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215
  • Size 1.3MB
  • Sample220511-3sea6sddf3
  • SHA256 6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Detect Numando Payload 1 IoCs
  • Numando family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

File Explorer

  • 6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215
    .dll 1.3MB
  • out.upx
    .dll 4.9MB

6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215

  • SHA256 6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215
  • MD5 SHA1 SHA512 SSDEEP
  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

PE Signature issue

Digest
c2:86:4d:b8:b1:b0:39:ab:50:17:e0:ea:fe:be:50:88:17:f0:4d:c5:18:88:05:76:52:28:13:13:24:b4:df:ee
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted

PE Signature issue

Digest
6d:34:e3:ea:bc:b2:8d:78:f2:f8:49:b2:2a:d1:58:2f:4f:43:81:5d
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
5343328
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths