General

  • Target

    4dadf7dcfd26fb4054fd4c907fcb8e12b0d6192439afc9e50e412954bf6276de

  • Size

    261KB

  • MD5

    19f1c5d5fec83a7cc1a27957f7942c2d

  • SHA1

    e3de6e845912193556f3850ff3e06ddbd91a966f

  • SHA256

    4dadf7dcfd26fb4054fd4c907fcb8e12b0d6192439afc9e50e412954bf6276de

  • SHA512

    f0156c2c18d9038312a566c247d45a08cc2f5acda44360ce965b139479e8be1cbe75df477a01395a204140bfcb0e37cd7aeb5fc404829d0227de8394985bb8f2

  • SSDEEP

    6144:5IqTfXZjwCZ6wphAoPgLVAXrp7oX6FFrz9f2+rPeU5gE0Apr4/bsdJPsTEO:5IqzXZMCso4LVOlFC+jeEFpc/bsdOEO

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4dadf7dcfd26fb4054fd4c907fcb8e12b0d6192439afc9e50e412954bf6276de
    .zip

    Password: infected

  • 1f5e25a403ec45bb014587df458dbd7ff7e94a50ec3d89b51fd0b67f1cb97f26.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections