General

  • Target

    4cc8305c3872eece74306734857cbe6c.bin

  • Size

    214KB

  • MD5

    952e2083818526c5fec06bffed26d109

  • SHA1

    0129976bfadfb36b3a16dc2baa327c8d480493f4

  • SHA256

    1ff5b92150d20622dd9e690c0f2e0e6bfb9d547a22ebe4414f619667380a3d73

  • SHA512

    26d3bebb1d1b2ae006e851ed5fa30905713b44cd8ac549e73e18c6f1a293113f6bfe7cdf8987a1033b4aa7ab82a6780c2d5b364a7c7816df7c1fae533b98ce64

  • SSDEEP

    3072:DwNjJOSGmgoHDaYs6+it4Sr4oOulux3yZ5Wuh4+0TNtoXtV0bWf8lcqTRe7sT+WE:UJZFD/rjthnlCa4vNtoXF8l/g4aWpQ

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cc8305c3872eece74306734857cbe6c.bin
    .zip

    Password: infected

  • a2b750b127b533b54c4525eecfeb98f20a9923ed0e39cafbc60280dae6faec6c.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections