Overview

overview

10

Static

static

10

de4f901137...52.exe

windows7-x64

10

de4f901137...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    234887d5171b1fc8f3c4c4ac9ed54679adeadf5e8b488f791f90c8c3dca8d2f9

  • Size

    215KB

  • MD5

    b0978be8143512af304f938060c2324a

  • SHA1

    b73395e3130bf22f0b0ef22e15036ab299f12680

  • SHA256

    234887d5171b1fc8f3c4c4ac9ed54679adeadf5e8b488f791f90c8c3dca8d2f9

  • SHA512

    8ed5f8416f7dad4399044b937c6797f6e43ee7750f27b8a0d584584f8cb582c002e7627db024db47fba702b95a4ef51ba083b9d837ce85cf34674501969b7305

  • SSDEEP

    6144:VcURc5IVkXGXuBfaPxc3sH3uxutEtAqFewoBZebDDn:Vc15IVkXGXR23uoAvnGr

Score
10/10
upxremcos

Malware Config

Signatures

  • Remcos family
    remcos
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 234887d5171b1fc8f3c4c4ac9ed54679adeadf5e8b488f791f90c8c3dca8d2f9
    .zip

    Password: infected

  • de4f901137b60be1b2c0155595baa77837d7325736cc1d4910536cd32cf58252.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections