Overview

overview

10

Static

static

10

HEUR-Backd...ke.exe

windows7-x64

9

HEUR-Backd...ke.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Backdoor.Win32.CosmicDuke.gen-988f745a586b032d140b9e5931787ac1ac586a9e0bf878773906cae789f82452

  • Size

    496KB

  • MD5

    421e507e71a20ceeab0a66d185071c1a

  • SHA1

    5c145daf82953578a8210a76af4909d47f002987

  • SHA256

    988f745a586b032d140b9e5931787ac1ac586a9e0bf878773906cae789f82452

  • SHA512

    88c69988995578f1af8f7cfcc0246d43e15442bf5cd0f395b395e7af5910e164f1c78050d4de5e1c8e0a8140a0fdc223bced2f9cd46f1ac8f6be40b1cb9d898c

  • SSDEEP

    6144:Ouj8NDF3OR9/Qe2HdJfwKO5huejbq0Cleco:xOF3ORK3dC5hue7Cleco

Score
10/10

Malware Config

Signatures

  • Detects executables packed with ASPack 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Backdoor.Win32.CosmicDuke.gen-988f745a586b032d140b9e5931787ac1ac586a9e0bf878773906cae789f82452
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections