General

  • Target

    NEAS.2eb61e3c09ab0ca3615e572de9277390.exe

  • Size

    2.7MB

  • MD5

    2eb61e3c09ab0ca3615e572de9277390

  • SHA1

    22b172bd467594c4cf2a34b7400769c6adbcdc67

  • SHA256

    cbd6b3c945b5f77e0e6aa07f6e3b1722864c775bf2ae3e924b6a1d41fdfda918

  • SHA512

    d07e52ff1e7fa77bfe2e05bfb5ca98e92137be659df0c03187ac428d8f170f3bfb46acb1e5cfb2b924ad5fcda757483b05a5f082542e682910b9704f96cbc94b

  • SSDEEP

    24576:ssF6mZZcVKfIxTiEVc847flVC6faaQDbGV6eH81k6IbGD2JTu0GoZQDbGV6eH81e:fF6mw4gxeOw46fUbNecCCFbNec4

Score
10/10

Malware Config

Signatures

  • Warzone RAT payload 1 IoCs
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2eb61e3c09ab0ca3615e572de9277390.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections