Overview

overview

10

Static

static

10

bTQu.exe

windows7-x64

10

bTQu.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bTQu.exe

  • Size

    233KB

  • MD5

    e8f66cc84d8cf1bb42d8fb8b88b7e5d4

  • SHA1

    2a241b028f4e3b2a9ac938315ee3db2f3267fbc3

  • SHA256

    d6c4e74a2a9ccdbe06290419c73185b032757f9d595b42029e8c245406a5731e

  • SHA512

    dd1a20c18f2c3b6372ffb37d3290d324b401f6ad897ffacb1c703b0b28f202f2afd6283117def76c5f96c075b5057c23efe7b50be7a16101a33895b81abe6188

  • SSDEEP

    6144:5mvl3n8iOiB4RBucKa3h80tK2gBWvADGGw6j1:IvlX8i8RB5JvADGGnj

Score
10/10
upxremcos

Malware Config

Signatures

  • Remcos family
    remcos
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bTQu.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections