General

  • Target

    bQ6f.exe

  • Size

    233KB

  • MD5

    955a7deb29f4b03b35faa62100d416fd

  • SHA1

    ff754eefbfb2052ebb87ba5df5ba8dfa93168251

  • SHA256

    8c71aeb54732d7c292c42820b9b46cd44710c58920bdee797c8c462b22c3569b

  • SHA512

    73c482edc4d5d605d6f684858f157cc78e488dcc03c507666e8641500767a11a3daff421a47ca2ad69fa3c7ba8468585d3182ecc133fa58e9088211c84fe6b64

  • SSDEEP

    3072:EOSI2I7txG68nYrugMZJMfsciIpuKNtrUQlAK3qSjYPS+IAXb3Ixi5eFrgurIlNj:1vG68YrvM80ypnjAedo3qiGUY2ChzI

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bQ6f.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections