General

  • Target

    dc0aa3013d9bf30250c9b705fa82e193c357fe41af6f959d176ccd49700376b3

  • Size

    612KB

  • MD5

    f8de0d6ed1485a9072c174307f23c528

  • SHA1

    22a8a360ff12d3604a18a1904c317c2b73ffd412

  • SHA256

    dc0aa3013d9bf30250c9b705fa82e193c357fe41af6f959d176ccd49700376b3

  • SHA512

    d94298fabecae552c5b96efe6cfd6450f87532927ef377bd4e9aff52ca931239ceadb05ade9c07056f712388970d5d8ca1140155a8072d42483fa319dceac2f6

  • SSDEEP

    12288:wvtBlnii+MB9lEWb6Vjo4iulkxNruiVWSq/nA/jT5a3ZyQt4IPa3xjl7sa4UQ:w3lii+MB9l3bYliuAkd/nA/M3oIPm5sk

Score
10/10

Malware Config

Signatures

  • Ardamax family
  • Ardamax main executable 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • dc0aa3013d9bf30250c9b705fa82e193c357fe41af6f959d176ccd49700376b3
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections