Overview

overview

5

Static

static

5

8b6eac65ff...f1.exe

windows7-x64

3

8b6eac65ff...f1.exe

windows10-2004-x64

3

[UPDATE] -...MP.exe

windows7-x64

3

[UPDATE] -...MP.exe

windows10-2004-x64

3

[UPDATE] -...MP.exe

windows7-x64

3

[UPDATE] -...MP.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b6eac65ff9a75731df8b6176f5e72f1

  • Size

    1.4MB

  • MD5

    8b6eac65ff9a75731df8b6176f5e72f1

  • SHA1

    eef148b380171a8a313b9ed0f7c4686ae9ea6f5d

  • SHA256

    5efe768f964a378625c946e9f1d408bb4cf933246e108d56eb0bcdf626006126

  • SHA512

    870a100675dd011a220659135710c70d9cffbc96c86aef7003c1e00019a03a36491d1c08a74efdd2dfb0c4405a5a4faf7208322a5a58bd8542ad17986fce0e20

  • SSDEEP

    24576:ivUl+dXbOVQ+eRYfrukuwBSB4UJBvi6RGUl+dXbOVQ+ivUIxaaCK7Ph:dEdXbMreeEwcB46HRDEdXbMrhIL1Dh

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 8b6eac65ff9a75731df8b6176f5e72f1
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • [UPDATE] - XMP/GWA - XMP.exe
    .exe windows:5 windows x86 arch:x86

    04b4eec1b14791bf23f31173f27a5df0


    Headers

    Imports

    Sections

  • [UPDATE] - XMP/GWCA - XMP.exe
    .exe windows:5 windows x86 arch:x86

    04b4eec1b14791bf23f31173f27a5df0


    Headers

    Imports

    Sections