Overview

overview

7

Static

static

7

Libparse.exe

windows7-x64

7

Libparse.exe

windows10-2004-x64

7

msvxc.bat

windows7-x64

7

msvxc.bat

windows10-2004-x64

7

psexec.exe

windows7-x64

7

psexec.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gtsev-spreader.rar

  • Size

    59KB

  • MD5

    c216d6757a0a944881fa1038dc105a69

  • SHA1

    5de0e0f0efca878af57e6c8fc18026d90d207afb

  • SHA256

    91639c206da158a13527e6436fc3bc149bb1ce531e0add94f0a256eae6918ea7

  • SHA512

    d0b3ac57c8231882752f6de2bb9f4b0852e1dfa7fbe459b45491895a1cdb94866aa0949ed17e8b81549d6789e2fc50ce11910c15db97f98e5d4e4df17331c1ee

  • SSDEEP

    768://lgQFIRM7f8cISguoowp4yEyQXGkTSXjyInHqXHZ4I5f+dJnOty7EnI/1a6qND6:H+iI6z8ccPFxQhTUjNwl5f+LOEz10N3m

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • gtsev-spreader.rar
    .rar

    Password: infected

  • Libparse.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections

  • README.TXT
  • msvxc.bat
  • psexec.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections