General

  • Target

    839ee918186c40f1aefdb9324b76d23d.bin

  • Size

    215KB

  • MD5

    052d4d553253ce14ce6af54ebda399b7

  • SHA1

    45e6f0cd57e1d0a2858c664e8b1049e6faac27ab

  • SHA256

    497c51728d895b0162e1d53249329f29e48b1cb03db4cc949192c7b5f8079bb9

  • SHA512

    6841d087a5155bbb115c7ab4ca17732fa1220070fd4e2955eb1658721795161237cc47762bb1c7c8a0f8c791268d58f1b7be2b626259138cfb4daa3f028e2006

  • SSDEEP

    6144:kGBcR7luFAV0mmno+lMaNLXPb4EFXEXpWWk063wHe:kwVm9aNLbvXEX8N3wHe

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 839ee918186c40f1aefdb9324b76d23d.bin
    .zip

    Password: infected

  • 1a5c013bfce405b156b314d2bac3db8f4e4bff2641ecba752416039c5dff5f2a.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections