General

  • Target

    528c1c5791eac02487d4b68bcad94174

  • Size

    1.5MB

  • MD5

    528c1c5791eac02487d4b68bcad94174

  • SHA1

    47c18ede30398fb579b086d87e69b8d7ef0d5a33

  • SHA256

    36a7f66d6a393b9aa5dd3247da230403d0930d41fbf3b67ff0be2461d8381caa

  • SHA512

    19d60676959aba060f546d7c23464e9b916b8b7661fc42ea772c5cb46d190ea589dd92b9163f0e95f99b8d757cace37f5c6a674d97fae64cd14d81aeffac5e57

  • SSDEEP

    24576:4bvw2dui07B/y7HgRFqjmkGqBo9vVK3/k1BMx2Qek48MhYUfLz7q5tKncsa7PxbW:4bxdneOHgDqy1qII38PfQekihGKS4ita

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 528c1c5791eac02487d4b68bcad94174
    .rar
  • AgataSoft_ShutDown_Pro.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • as_shutdown.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url