General

  • Target

    bOV4.exe

  • Size

    232KB

  • MD5

    0e2282e4d804c6fc49e5e894ecc980f8

  • SHA1

    f447c6152c2ebe1c161f82355cf77a352035a35d

  • SHA256

    6291532d8a12896b5213e468896e222ca6c112b977d53c6a0a61cd78a3ee7535

  • SHA512

    62641e586610ea6dd68ebb37006edf1e751d1847c524a73062661c7a9da9cb0266b0ee4557801e6b8b80db5e30ea67a0e8689ea2615797a969bdc0965f0a99db

  • SSDEEP

    6144:DvGSN9gWuLpcBKnVBYAsmrzpyDfOXXV1B:DvbGWulcBKV3uOX

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bOV4.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections