Static

static

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    waltuhium-main.zip

  • Size

    583KB

  • MD5

    9e60b5ea2629bfe978db86456925ab7f

  • SHA1

    b69657da2ed0a22b98ea0edbb4295b740bd68f89

  • SHA256

    a5fa33a95311af55f8574b69ca4c604472f2c06c8965ae869dd4495e9bce22b5

  • SHA512

    84327bb358489ac433c4ed66e125ecdf953272332a2b06ac6314da4dd3756aa86d6c53c686b0d9d011660e84ddad42b6908d490cee112f084239cd0714681f88

  • SSDEEP

    12288:ovfguFY+SdywXfBslqY7b9ukR6lurtTLS+28Ym52hpKD6OFjIZfgWflLa51CX5G:ifguFY+SXXSlqmxp6wtTLl27m5wp0fpj

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • waltuhium-main.zip
    .zip
  • waltuhium-main/AssemblyFile/version.txt
  • waltuhium-main/LICENSE
  • waltuhium-main/Obfuscator/obf.py
  • waltuhium-main/README.md
  • waltuhium-main/UPX/upx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • waltuhium-main/Waltuhium.py
  • waltuhium-main/build.bat
    .bat .vbs
  • waltuhium-main/index.py