Overview

overview

10

Static

static

10

xqGqlVXkyPJD.exe

windows7-x64

10

xqGqlVXkyPJD.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    xqGqlVXkyPJD.exe

  • Size

    232KB

  • MD5

    31f2ddb222ce3eeb11ef580ed1cbf8f7

  • SHA1

    e1bcacd23844b5e8635e88971c3c61e6cedf0f2d

  • SHA256

    0971a341d1f5c7c928463ee19acb6b226c9dda7c1682b8bee42f4394921e67f4

  • SHA512

    3ff98c1ac41d053070d8e084fe47f2d749eb4cf10457a75a48ba89bec2bc8f4ad80c8ca0301d37e45f98494ca66eaa62e829b041e988cac09f91ebd8b25b2118

  • SSDEEP

    6144:0vGSN9gWuLpcBKnVBYAsmrzpyDfOXXVxB:0vbGWulcBKV3uOX

Score
10/10
upxremcos

Malware Config

Signatures

  • Remcos family
    remcos
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • xqGqlVXkyPJD.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections