General

  • Target

    infected2024030801.rar

  • Size

    2.8MB

  • MD5

    468cb612990461a9389e21c5c52c1add

  • SHA1

    d047aff9b980609383a0699df8b661a107b08efc

  • SHA256

    e94f90902e900bdf40f10c68811f6d7bd67cc54f7727af3a9a49488d61824a62

  • SHA512

    1763ef462c5b5f4d6905b6338f55bc706e153c440f1c807ba649d2c25c3829be90e9202ca59eb0c370f36b9dea4be2c3b758b4375cafd5c1d15b1682a7d4c170

  • SSDEEP

    49152:ZHanQTRX/VNmr/8PajhystfAedH+GpptMFLnt6Qn8QuBTCfu/dTt4fnmOAfuUjmO:ZQQJTKUqfHpptgZ6Q3QCfu/dTCmhJVjL

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • infected2024030801.rar
    .rar
  • OutlookUpdate.exe.vir
    .exe windows:6 windows x64 arch:x64

    537405cf96d60fab5ebca124a8ae4115


    Headers

    Imports

    Sections

  • morrowind-2efdb9.exe.vir
    .exe windows:6 windows x64 arch:x64

    428e567357e25da5b43195d6cb366687


    Headers

    Imports

    Sections

  • morrowind-a5fa52.exe.vir
    .exe windows:6 windows x86 arch:x86

    4b4421c972c4590f6eff27363f29a972


    Headers

    Imports

    Sections

  • 查询企业票6001-45b5bb.exe.vir
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections

  • 查询企业票6001-b0e80a.exe.vir
    .exe windows:5 windows x64 arch:x64

    dbd448cf522238495b189a49f0ef3415


    Code Sign

    Headers

    Imports

    Sections

  • 查询企业票6001.exe.vir
    .exe windows:5 windows x64 arch:x64

    dbd448cf522238495b189a49f0ef3415


    Code Sign

    Headers

    Imports

    Sections

  • 查询通用版9205.exe.vir
    .exe windows:6 windows x64 arch:x64

    7eb65afcd30fd9b210055bc633bffbd8


    Headers

    Imports

    Sections

  • 测试@ssdp8.exe.vir
    .exe windows:6 windows x86 arch:x86

    86e8c1a0acd30d8743d8359ae9599f43


    Code Sign

    Headers

    Imports

    Sections