General

  • Target

    1d9c728ec89c668cbf04b3675083c147.bin

  • Size

    4.5MB

  • MD5

    4d494d342e366f69cd430a19366984e8

  • SHA1

    0e93cd1c0cf591d70ef4b199a5715f619b751685

  • SHA256

    48e232ebe95835442e80e2f28db8b4b30011031eb1273ae8a138e5667179b049

  • SHA512

    f13598e4219d7e201c294668297a8f4d0ddf169d3d848feda66edd47ea923349d7b3ac735ea83a6a06ecc43373c3334f2b6846ebab2f7a9b8661a726764a6c89

  • SSDEEP

    98304:Z+XfciPYh3T7PUOQ8WVtliM8JmyP6hEVzod4980gyBzKYkq:UXfpPYh3rWVtlB8JmQSEVDbgImYkq

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d9c728ec89c668cbf04b3675083c147.bin
    .zip .ps1 polyglot

    Password: infected

  • 808543217f0aac497b3fb5ad394ad58d114705d6b1edede1f1b9712953668bf6.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected


    Headers

    Sections