General

  • Target

    3ca7674da5063c8139306dfccf3bc7fcf3ee6369556718347571a3a6a362190a

  • Size

    4.3MB

  • MD5

    0f9c753dbac76ebb158f08b9c3519456

  • SHA1

    e15bf378874c9985d65b645100d2f571f9928c03

  • SHA256

    3ca7674da5063c8139306dfccf3bc7fcf3ee6369556718347571a3a6a362190a

  • SHA512

    56fb1aab362045c7affe131c800a201a2b4981ea1a1026dd6b8da39f7285209300dab378f52d89bd0950b113d6b228162fc8ab2db05673c372657cef771a5ea5

  • SSDEEP

    98304:2U9vY1G3UKGlbPIe75Mry66HU3A7glnkGLbMfCeYeg0CK:4G3U7Mry61359kQbMqeV9CK

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ca7674da5063c8139306dfccf3bc7fcf3ee6369556718347571a3a6a362190a
    .zip
  • HEU_KMS_Activator.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections