General
-
Target
5021647016630bb2e43eb6cad5ead756d931f0e54b4677aad91709fe2f75a60f
-
Size
233KB
-
MD5
b2303ad294c97a0885730d74c2f38e42
-
SHA1
759ff36b3ebb373ddb7272f4e72a81da59e04195
-
SHA256
5021647016630bb2e43eb6cad5ead756d931f0e54b4677aad91709fe2f75a60f
-
SHA512
24f6c8eb7e06ae875f8946eeeecbb3ec705b62f6ecfca0097b8a5d7cbb0712cab65e909c4ca62bd1e9c931321352418e7bc5f4e58bb6f20fd3f5e689b24658cc
-
SSDEEP
6144:dmvl3n8iOiB4RBucKa3h80tK2gBWvADGGw1iNDV:svlX8i8RB5JvADGGMU
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Remcos family
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
5021647016630bb2e43eb6cad5ead756d931f0e54b4677aad91709fe2f75a60f
Headers
Sections
-
out.upx
Headers
Sections