General

  • Target

    a72cd6dcf20df1725db00b53e95a35cc02490a974845b2f0e45db94d85eb69ff.zip

  • Size

    2.4MB

  • MD5

    b0b4bacbd9fb3b87b4c4abd497dbe863

  • SHA1

    5bb6dd1d8f758d43c91e5b666f1a39458f99fc54

  • SHA256

    fc4239094c72946bf8ce04cdd27f8cd20b42564012c9ae26022bb34ba8de12d9

  • SHA512

    1e6abb2e7a1c4002ef816d7dae9cdcfc2a22f507ae66ad2e77b8379f4961e5ecd7b94a1757b10ce37184b3bab0f9501b8b73ba354ce7d2fb07b14d2c92f4b4c0

  • SSDEEP

    49152:TTLY6eQunNHOd6oG24kaJMQSdCNnOeouOMTODZVh+F:zfetHOEH24kakC9OeoHMKDZz+F

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a72cd6dcf20df1725db00b53e95a35cc02490a974845b2f0e45db94d85eb69ff.zip
    .zip .ps1 polyglot

    Password: infected

  • a72cd6dcf20df1725db00b53e95a35cc02490a974845b2f0e45db94d85eb69ff.exe
    .exe windows:4 windows x64 arch:x64

    Password: Infected


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections