General

  • Target

    5c2f5a1a392e41706497c4af376d04623799635f6807a282643f57abf40cf493

  • Size

    631KB

  • MD5

    ff82f4c9cbc8fa93567bdf7792d6e6e7

  • SHA1

    c3c061b89827a29e075c00e84633373524976265

  • SHA256

    5c2f5a1a392e41706497c4af376d04623799635f6807a282643f57abf40cf493

  • SHA512

    e1ec0161237c81b09a0eccbb8bc6da42f4772c9cd5a91c52e54f8bcabab7c7b9adc5ab2c82adb8228e8024173c230dcb9eb931701d6f71d2b1bc6ad0374bebf0

  • SSDEEP

    12288:i3RaRdzXNfBtHgNcuDde/P7z92IAsuBUkf3HfOzdqGVGHcc8iEy:i3gvZtHQcK4n1CBpf3fOzW/8k

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c2f5a1a392e41706497c4af376d04623799635f6807a282643f57abf40cf493
    .zip

    Password: infected

  • 94095bca33da33ad83f7b8d55b150cc79f646625002aeb595524c7defe2707c7.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections