General

  • Target

    tmp

  • Size

    334KB

  • MD5

    1922d66fbc44d5219b8853b0f4356dc8

  • SHA1

    0b1f173c3a698e62be194487f88c0ba207c2ccf8

  • SHA256

    9a7f5a09814e2759ea89731a9075d52a1541d124941de8ea9fc6610ff959c387

  • SHA512

    49092e6d64d1c3ba5bcc4c59b1cf1b0276b9a4f0f7bb7747dde6de73809163109115cbf680f59fbe2986f1d9f527db0d58a01d5704618b6d831673762f9c3388

  • SSDEEP

    6144:eMaGDOd9m6Gt8wX3VsXZ5yUg+yb8flBMJBmvGKxOzVO+qvowAWjW3eE8V/OD0CC:6tat875yUg+yclBMJU7qMo6RKC

Score
9/10

Malware Config

Signatures

  • Beds Protector Packer 1 IoCs

    Detects Beds Protector packer used to load .NET malware.

Files

  • tmp
    .exe windows x64


    Headers

    Sections