Overview

overview

7

Static

static

7

AUTOBACK.exe

windows7-x64

7

AUTOBACK.exe

windows10-2004-x64

1

ERDNT.exe

windows7-x64

7

ERDNT.exe

windows10-2004-x64

1

ERUNT.exe

windows7-x64

7

ERUNT.exe

windows10-2004-x64

7

NTREGOPT.exe

windows7-x64

NTREGOPT.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1222f5b3a612673c3543adf6ca745f65

  • Size

    462KB

  • MD5

    1222f5b3a612673c3543adf6ca745f65

  • SHA1

    e00e076802b430653b0894f98f45d74e5de840f2

  • SHA256

    78d1aac663eab39776d2539531e801bfc2f8239dd2f6740a03a257ae64aa1590

  • SHA512

    30ff899fc0f856618739d4d9c73c6d86f6efc0506a8260ce9a02ca41a1c3fe7cabf8e75d3c1057132f6c702edd13711f926a7aa46d0c09be06a66753cd1e2c84

  • SSDEEP

    12288:ffUd5rh7canVuSFO1AgavgRZr4xc/DNTIo9x9b:3Uf59nooPgwuExcp79x9b

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 1222f5b3a612673c3543adf6ca745f65
    .rar
  • AUTOBACK.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ERDNT.E_E
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ERDNTDOS.LOC
  • ERDNTWIN.LOC
  • ERUNT.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • ERUNT.LOC
  • LIESMICH.TXT
  • LOC_GER.ZIP
    .zip
  • ERDNTDOS.LOC
  • ERDNTWIN.LOC
  • ERUNT.LOC
  • NTREGOPT.LOC
  • NTREGOPT.EXE
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • NTREGOPT.LOC
  • README.TXT
  • 下载说明.htm
    .html .js polyglot