General

  • Target

    5f6a3aac616a0c72bfc004ca666b8fa7

  • Size

    1.1MB

  • MD5

    5f6a3aac616a0c72bfc004ca666b8fa7

  • SHA1

    b4a0f53df54814cf23409f45263b355f75faee4f

  • SHA256

    ddc6bf8f264e508dd8e42409f87153ba287d9598bf6a50af8abf3b4891949f40

  • SHA512

    3d860425e3e2d2d37147bf9cdc824d9cb4cc35a5fdbc4831229c266596bfd5994b755335ae3f8647ba28c7f24866b837172bceb690cca88565dd1c9560a11af5

  • SSDEEP

    24576:aveGoYSPDykVOBES5pDMHpa6YSYAabP0aNGnXRVQwaZ4DNH/xW8Z:avboRukVmUZY7AabP0IGhVQwyQNpZ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f6a3aac616a0c72bfc004ca666b8fa7
    .rar
  • obsidium/Obsidium.exe
    .exe windows:4 windows x86 arch:x86

    52bcca0293a2e7268dc0bc2b29d8148f


    Headers

    Imports

    Sections

  • obsidium/keygen.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:1 windows x86 arch:x86


    Headers

    Sections

  • obsidium/license.key