General

  • Target

    189b63527e1d87c1f8a662149725c63849c017d66260158ad5d41a65e0dfedac

  • Size

    4.3MB

  • MD5

    6b4d27d3ebc09341778fa218b3aa6064

  • SHA1

    68dd65a15626f8fe1b2021affed27e46f14b7285

  • SHA256

    189b63527e1d87c1f8a662149725c63849c017d66260158ad5d41a65e0dfedac

  • SHA512

    4e78e496cac88e24d6de4d989d1caaead4e7fbd41b6ee1e3fe4c0abaec0f45dfec3c3f716a679f41f02cef2d5dbdf566cba242d60126253e3af63765e231c23d

  • SSDEEP

    98304:GzjdfHVvi4aLuVIRud262cNTaPMYQ3WrX+s9zOjLeb9FnvA:GfHQ5uVIUdfNzV3iOjLaXA

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 189b63527e1d87c1f8a662149725c63849c017d66260158ad5d41a65e0dfedac
    .zip

    Password: infected

  • Excel.exe
    .exe windows:5 windows x86 arch:x86

    bf82e6aeb882cd647d53cf12b9cbe8fc


    Headers

    Imports

    Sections