General

  • Target

    bTud.exe

  • Size

    233KB

  • MD5

    c8b5bcc79120a06f16b69bcef71324ac

  • SHA1

    75acf6d77851efc30a181ad9a78334b7c272705a

  • SHA256

    de4f901137b60be1b2c0155595baa77837d7325736cc1d4910536cd32cf58252

  • SHA512

    e8e842e78ae6ae6a395a3c30f2ae043fc33762d0ac13df6ad333dbf1c28345ca79c7c5af5f9a33e134c13db9368a4b65a3a229c3189608b05e02402632bd5a7c

  • SSDEEP

    6144:tmvl3n8iOiB4RBucKa3h80tK2gBWvADGGw6j1:8vlX8i8RB5JvADGGnj

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bTud.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections