General

  • Target

    419ac91790fca97b1dbddee1c24f903d8e7eecf9c57a4e29faeb6af4433809a5.zip.zip

  • Size

    5.0MB

  • MD5

    6afb9afd9283bb16abd4bc3941763472

  • SHA1

    b87ebfa645302418126d7b73ca5fe0f97f98302f

  • SHA256

    e86930bd5f27bfb0ebd9ad94ad44a7540e26c740bb03c8fa9f471e0c97881bfc

  • SHA512

    c877a0cb2a9b5f7f89dce87a2613a4a023b0d0859bd7e389e8188ad9d68b296b275c61106de327167c9907d62f0e90f5153fe2d23d0b9e2c95044ee98e2c148a

  • SSDEEP

    98304:0U+1mDGFcgcFCai5/iAw1ugxhDmZqUaQBbEcB14qt37L:0UMmcMO/+1usXkbEcBvH

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 419ac91790fca97b1dbddee1c24f903d8e7eecf9c57a4e29faeb6af4433809a5.zip.zip
    .zip

    Password: infected

  • 419ac91790fca97b1dbddee1c24f903d8e7eecf9c57a4e29faeb6af4433809a5.zip
    .zip
  • Antropology/BASS.DLL
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • Antropology/a-logy.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • Antropology/antropology.spd
  • Antropology/product.nfo
  • Antropology/suspend.nfo