General

  • Target

    mysql.exe

  • Size

    1000KB

  • MD5

    9ed34639dc5dfab4a80375165235080d

  • SHA1

    cbd72f9ff4f53e74e28bee025b5f9622f24c6aa0

  • SHA256

    177f14fac20d86b1aefcd7e5ced71b682f325163da1b7511439aa81cd1f36fde

  • SHA512

    bcdf1ec8ef70fdc2212f6f8ffd083d0969dd11fb4913d607135c9a384ca2d621b0ec7b74385f1b99cc9415c96d3d800f5004d1515b99fc6d94287f7b03f342d5

  • SSDEEP

    24576:mNbQ2ev+B5qD8eOK6vOU4qicyEfI+FD7Ynx5ajO:ubQ2s6qD8tKFlq0EQ4DsnLajO

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • mysql.exe
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections