General

  • Target

    e510da3919bd636fcc0b09a3f00355175b660761fe0481809a8cef06d305f553

  • Size

    365KB

  • MD5

    7bb890fdf757f2dca62acdfb2bb26ff9

  • SHA1

    7fba93d7d5fe0250e736675a7ce85c6129341de6

  • SHA256

    e510da3919bd636fcc0b09a3f00355175b660761fe0481809a8cef06d305f553

  • SHA512

    6021fab5a5ff2d10df93173c3fbfbbe64bed1bc15bcf3958c5bc152eb3fcd7b1fde7baac97cd52a1cb5cd75bbb94d6f09bb6dcc8bb694e048d3c95eff32048bb

  • SSDEEP

    6144:lxLA03gFOxrMRMmpNqY5/uCww/KbQs/2eqYKORy2hLN0ZZOeVsF6Utv0lGr22Iev:lxLABC4RMmpNPpu4YlqYKORy+WCe2AwJ

Score
10/10

Malware Config

Extracted

Family

webmonitor

C2

windowsupdate.wm01.to:443

Attributes
  • config_key

    wZ6IsN5IRQCrkMvW3mZxQ6qbw1Dn0lor

  • private_key

    TwtUbBqhf

  • url_path

    /recv5.php

Signatures

  • WebMonitor Payload 1 IoCs
  • Webmonitor family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • e510da3919bd636fcc0b09a3f00355175b660761fe0481809a8cef06d305f553
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections