General

  • Target

    cf61e4ddd73e0bd32cd77c6956e3bfee8ce65b0630833004b3ea0d5248d7e7cb

  • Size

    962KB

  • MD5

    b64787f81b58dce4c7767ee59ad5bcfd

  • SHA1

    6c7647b529fa39d972c60a6f5e50a8df5ede9bbf

  • SHA256

    cf61e4ddd73e0bd32cd77c6956e3bfee8ce65b0630833004b3ea0d5248d7e7cb

  • SHA512

    b44cde17585268fa22c77b283f3e20f42a32963dab2fc237d78cd140e94c6cd16d32c82f46540af398ab1b023f052b632be0d3b08b85533babcef59204ca1115

  • SSDEEP

    24576:CLe9mVeYFzSANNVTHT2T6a6N5618fUGMQAEgNP5m9F0nES3b:Z8Vr2AJz2TknxMPP5m9qn

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • cf61e4ddd73e0bd32cd77c6956e3bfee8ce65b0630833004b3ea0d5248d7e7cb
    .cab
  • almutairi.exe
    .exe windows x86


    Headers

    Sections

  • bos3od
    .js
  • cygwin1.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • hide.exe
    .exe windows x86


    Headers

    Exports

    Sections

  • nicks
  • nicks.t1
  • ntcnsl.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • o1o2o3o4
  • t1m3r
  • universal.exe
    .exe windows x86


    Headers

    Sections