General

  • Target

    e6cf00dde72bff08f9d7464e96abe8ecee93126234551b42c45c908507faeb83

  • Size

    2.1MB

  • MD5

    6cd30e9a9fc1788b11ccdff711fc5df6

  • SHA1

    8b2c51b9ff822499003ebcb69c86f45f8b7666dc

  • SHA256

    e6cf00dde72bff08f9d7464e96abe8ecee93126234551b42c45c908507faeb83

  • SHA512

    8c5dd7039ef10ec085137944578863b18e425a4c45ff09e49fcc2103b3717402d95a4ed16f7ccb3ba597aa623586f31b2efdacbd4365190f99a59181ea655949

  • SSDEEP

    49152:LtOFqAb0sMcYKNEgS8/Ngpsmf5kFVl2NdWDOIdFR:5MoctGNBkFVPOIdFR

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • e6cf00dde72bff08f9d7464e96abe8ecee93126234551b42c45c908507faeb83
    .exe windows:4 windows x86 arch:x86

    187b3ae62ff818788b8c779ef7bc3d1c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8e4c63f70f7cc6490634d743e795c93e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/BroomSetup.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/file.txt
  • $TEMP/syncUpd.exe
    .exe windows:5 windows x86 arch:x86

    9b5a19b9bae0b7af387af7000f54dfa5


    Headers

    Imports

    Sections