General

  • Target

    586428f955635be733a1f880a465e06059d02c98b8d3040cba40987b922c81d4

  • Size

    306KB

  • MD5

    2f649f8e0f7ca61fbb7590685665b7e4

  • SHA1

    98efb878eeb8dddba04d756aa93f93e21e696e47

  • SHA256

    586428f955635be733a1f880a465e06059d02c98b8d3040cba40987b922c81d4

  • SHA512

    2e3b385801db64fc2fff9cabd260643dfe7a4a1c8332ec1a8dcaed8ae89f8334ed02372973fa5d1e2ff0a8dc3e63835baa38b7aca4c6c0aafbeaba0e688a48fe

  • SSDEEP

    6144:s4POcmKTIXbeRoLzCzPixtrUo9m7ffOSsveBQmH3+1MVNQyWywzv5eSpqDP0:X2t+svLzyixqo9m7HOSsve+A3dWVv5tH

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 586428f955635be733a1f880a465e06059d02c98b8d3040cba40987b922c81d4
    .zip

    Password: infected

  • cd85dc6dd02d84e6425ff65dfbeedaad8aeaddf3ba95582aacaf7e8079d888a7.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections