Overview

overview

10

Static

static

10

5767199648...fb.exe

windows7-x64

10

5767199648...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    576719964838cf09686c4bf807e5ebfb

  • Size

    208KB

  • MD5

    576719964838cf09686c4bf807e5ebfb

  • SHA1

    20288d41d3a816627e1fcb7b6392ed4090ad6b4e

  • SHA256

    b5e29d0067f26eb8d7689c276b3fc5fccd2b6134f9e7740e831a3d474c60ad1d

  • SHA512

    d258e9b2f0af8d66f70e0752a8a20bedfb014dfe4bc6f2c1450977a41fa8fc112119c67fe92b2d804b3f4bf6fd3586ae87211f5e0f09337baa958ff6287480ef

  • SSDEEP

    6144:W3x7aff2j1r34G6JxmCaS3LBgAlIAC4S/cldy:LfG9IB/m/X/c/y

Score
10/10
upxmodiloader

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
    modiloader
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 576719964838cf09686c4bf807e5ebfb
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections