General

  • Target

    1a174a556ce8e7a22c66f515ae1591f775bb673e989d5a39334f901edccf5406.exe

  • Size

    127KB

  • MD5

    93a7ed73f2245a1f043b74e724705f54

  • SHA1

    6b97b4cd5d44e607540b841081f68b7755ce59f5

  • SHA256

    1a174a556ce8e7a22c66f515ae1591f775bb673e989d5a39334f901edccf5406

  • SHA512

    ab1d5999d7bdeb0a2d93a7476cbcace92971417d45a7459fbe294ed66d0466f0e121a68fe9ade89c3c71d4afab3b81b94aaaeabc99e6f02f79c307acbf574090

  • SSDEEP

    3072:bhADm5OPINYUsx0Ki6uA9bKHtBdQex7Coy5q5l:bhAcO7xhjuA9bQQzq

Score
10/10

Malware Config

Signatures

  • Detects binaries with PowerShell command enabling SMBv1 1 IoCs
  • Detects executables referencing many base64-encoded IR and analysis tools names 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a174a556ce8e7a22c66f515ae1591f775bb673e989d5a39334f901edccf5406.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections