General

  • Target

    b054166a9ac8d8a69f477ce171faaa1192fc9399ce8a2d8066478f99c1e750ee

  • Size

    2.5MB

  • MD5

    4f02e23d3becdbc62a1653fac2fd88b4

  • SHA1

    ef8d14d04c33d8ac16af189858f3f51bd55b6c0a

  • SHA256

    b054166a9ac8d8a69f477ce171faaa1192fc9399ce8a2d8066478f99c1e750ee

  • SHA512

    895848f0eec88d32e264305c568c684c528dd22f08106d49385cf68909644715b4c9a3b80b27890b2cd15065457ea28749d52a62eeec2339630240aba36a8fef

  • SSDEEP

    49152:mJ5CdZsXB23hZtkWwahk4+xdZYEE6ukR3//CbTrfC490/nxNyPRpFAFpAs1:mjaC23hsWD64YdAu33749oxQyF6s1

Score
10/10

Malware Config

Signatures

  • Avaddon family
  • Avaddon payload 1 IoCs
  • Detects executables packed with Themida 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b054166a9ac8d8a69f477ce171faaa1192fc9399ce8a2d8066478f99c1e750ee
    .zip

    Password: infected

  • 7b7c16367746efe7583ae46235b2f062ce44602dda990c9a11a730d619b8d365.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections