General

  • Target

    bQxf.exe

  • Size

    233KB

  • MD5

    eb5c869423632f5d3fe31cbbe85bfdbc

  • SHA1

    0c8097ea26f0c6c5a5df007b8f0fe168ba0799d6

  • SHA256

    46578af72eee4fa34a150d0f9409041fcdad17a061e77f1017640ef7373a6da6

  • SHA512

    43728de651445ef1b8930b2b34511d79d583c65971ef7d58f5d8c07f0c91bedccdd3e6de88ff7a9a9330cee6bd74685a107c0b3283736afc161e32c15370aaa0

  • SSDEEP

    3072:tOSI2I7txG68nYrugMZJMfsciIpuKNtrUQlAK3qSjYPS+IAXb3Ixi5eFrgurIlNb:YvG68YrvM80ypnjAedo3qiGUY2ChzI

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bQxf.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections