General

  • Target

    NEAS.d430cc611d65b13714aa9038ae93ac60.exe

  • Size

    994KB

  • MD5

    d430cc611d65b13714aa9038ae93ac60

  • SHA1

    d173727de2baf48ae7bfcf2f4dd2e06a7167a873

  • SHA256

    309577a0f38238b9c36758c0ae71327dd04b009f0621d40ccdbeb96d96a42b34

  • SHA512

    bcccd7115dea7e73a3e29aba42e0598032de5dfa36dba28b2b561ebafaeb92749b643d9b6bcb64c6b4b0c4c9d3356ce3d7dff8d754383f1e9be195d3a4002a17

  • SSDEEP

    24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxi:mJ5gEKNikf3hBfUiWxi

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d430cc611d65b13714aa9038ae93ac60.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections