General

  • Target

    tmp

  • Size

    210KB

  • MD5

    b5b74954daec7340e3280d743ea53a57

  • SHA1

    369725b470bd00455ea2cd8d2188a85d198e83d4

  • SHA256

    df8a82e384952b608508a0decd8adfabf4903bb4474b86063b1ad4fbb1870c01

  • SHA512

    bd5f87af5ea77e3fbcb414affba9054b1f9b0b56202b97b9aacab5e21d8f0399a08f0c081e4f891dda2ae154c082718280895082088ed9c84540fd1a5a5bea89

  • SSDEEP

    3072:EZX3EbPUFYKpkFErDNOz2jWRCTnaHF6XE84ryvf7txItNGyENmftgazIII:yUUFYQQErxOvCTnvXgmvMtMw

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections