General

  • Target

    d490e5eed4be2e074f96fc5d6b6fb42f65afd4c79660da5443c42da308813edd

  • Size

    306KB

  • MD5

    57859c4d4939ac698d91220adb889e4e

  • SHA1

    0e68a4820ad61443b4b5225acf28a79f7a2a0e21

  • SHA256

    d490e5eed4be2e074f96fc5d6b6fb42f65afd4c79660da5443c42da308813edd

  • SHA512

    cf9bb82ec9179684c2627e6cdbbcf950f510d768f3b384fe52118b6f05e951e4c23e81a6c45e33960207412843ac0b27226e70a0f003c293fb382aa7fdc1db1a

  • SSDEEP

    6144:nwrhyZ/Qgce6A74b7TABmOofpft4ZkGNXlpVZ5P0jVAr8SdT1JDd:JtQE6ZomOofpft4Z9b/dVTXd

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d490e5eed4be2e074f96fc5d6b6fb42f65afd4c79660da5443c42da308813edd
    .zip

    Password: infected

  • 5d440b1258da22d070e660c9ef76b5944e246274a22e145d3de5a1471635e380.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections