Resubmissions

04-02-2024 21:01

240204-zt7gkaagb6 10

General

  • Target

    Clown.exe

  • Size

    355KB

  • MD5

    666b04054db7cd449d31ac30d0d448fa

  • SHA1

    c83a12f38392560cf97228f510bf1992626c4650

  • SHA256

    ebe6967d80552c9543d8f2e8b8cacbae667d0e504e2b8874028e2a438b63227b

  • SHA512

    1bf1ae69b8251604c329ec001cea069509d709870b9ba7f6748557d4cafd5353ad4705f56fe2b7d1a5f856a608270e2e81d06772b7e8869dc661a2754232d984

  • SSDEEP

    6144:3L1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19E:3LdcfxaeM6fy/KaVUtgKkTZ73coNRJ

Score
10/10

Malware Config

Signatures

  • Babylonrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Clown.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections