General

  • Target

    9bf0abd548891d48b8d294fbb95be22b2f325041e14b0de7b43867d9e68c7031.zip.zip

  • Size

    768KB

  • MD5

    49c33e2e8d973c35cb1aacc3e57f3ce5

  • SHA1

    b10c8dcc0e6000824a7440ffa48af8ebc16082d1

  • SHA256

    fca1d516d2110bc9048bcef75701b5a99b68880d9bc7d83233f28509916aa7e9

  • SHA512

    b0c3ea1f5efca27a5337606a85c4bd5e1b4b16f47fe27ea6ca3e32ad6c4dbe0be91fa6d4690adbe02105d43116a805daeec855bfe865cda1e3311b1a22c18789

  • SSDEEP

    24576:Lgjc5eQIcnnD4UMf+anPcSgkctMMbvS6g8P:EjQeQIinD4DnPcSKbvSjc

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9bf0abd548891d48b8d294fbb95be22b2f325041e14b0de7b43867d9e68c7031.zip.zip
    .zip

    Password: infected

  • 9bf0abd548891d48b8d294fbb95be22b2f325041e14b0de7b43867d9e68c7031.zip
    .zip
  • changelog.txt
  • soldatserver
    .elf linux x86
  • soldatserver.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • update.txt
  • weapons.ini