General

  • Target

    54806920d236be56169aeed806d40943

  • Size

    479KB

  • MD5

    54806920d236be56169aeed806d40943

  • SHA1

    a022af36cbeffb2b96660307f5efb97523bbe8bb

  • SHA256

    015e5f4a5dafc72264174e231867fb85d5fc5ed24850b96b60977060b5a1156b

  • SHA512

    e5e57f72645c99eeaf3777f9c4d6fed8017700c24eea100ad80e2b5c8c21cef757e3847f766740f41ffb19017df48f7a59e32c6481754db31d03d013b085aba5

  • SSDEEP

    12288:TPOSOpQnF/f27C1AAWR+GSliaMUPUnOVPEwZii:yCQC1AzYGS4pUPUnOVPEfi

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 54806920d236be56169aeed806d40943
    .rar
  • brvpn.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url