Overview

overview

7

Static

static

7

0503-196/S...ln.exe

windows7-x64

7

0503-196/S...ln.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c6a21dfa870b61713838d4481ac57a5f0de7dd3a156099a74dcd842d6458171.zip.zip

  • Size

    217KB

  • MD5

    725549bacd0df83897548caaa37ca112

  • SHA1

    79ce33a076b75c76ce8a1fa5410cfda14927f3ff

  • SHA256

    60214d0882ab15b4c7858cf3ca8c0a21598ae040f590e12e84e1a56dd46e9291

  • SHA512

    7871890f305b78f8277c4f19d100e2f5c7e1a6c3c4d6a06c7307accbe1cc6fd6d5b3b57a5df2cfdbccc24c733fc1c88f0b5e5262c36021577d5ce519124f3b8f

  • SSDEEP

    3072:zpxmT7EFlYUvyph16OZ4n2hvebsAxEQiVj2fedGpn5kRDQP4kd0Eldc8RBqB+j2d:zp7uh/6WGbBYVy7pYEPNds8RO+6d

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c6a21dfa870b61713838d4481ac57a5f0de7dd3a156099a74dcd842d6458171.zip.zip
    .zip

    Password: infected

  • 6c6a21dfa870b61713838d4481ac57a5f0de7dd3a156099a74dcd842d6458171.zip
    .zip
  • 0503-196/Alte Dateien.ahk
  • 0503-196/Bitte Lesen.txt
  • 0503-196/CD-Sicherung berwachung.ahk
  • 0503-196/DiSo.ahk
  • 0503-196/DiSo_compile.ahk
  • 0503-196/Eject.ahk
  • 0503-196/Eject.bmp
  • 0503-196/Icons/DiSo.ico
  • 0503-196/Icons/MacName.ico
  • 0503-196/Lese-Lineal.ahk
  • 0503-196/MDIList.ahk
  • 0503-196/MacName.ahk
  • 0503-196/MacName_compile.ahk
  • 0503-196/Neuer Ordner.ahk
  • 0503-196/QCD.ahk
  • 0503-196/Skript zum Artikel.ahk
  • 0503-196/Standard-Editor wechseln.ahk
  • 0503-196/Standard-Editor wechseln.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • 0503-196/Verzeichnis-Liste.ahk
  • 0503-196/Winamp.ahk
  • 0503-196/likeDirkey.ahk