General

  • Target

    600694fa52aa0bd711a6d564728931380bd29891fdf62c26b1f95224589b78d8.exe

  • Size

    149KB

  • MD5

    81740342d64bc105d369f39bcf23e93f

  • SHA1

    4d5d266bc24ed969108c68f794883957a22ae939

  • SHA256

    600694fa52aa0bd711a6d564728931380bd29891fdf62c26b1f95224589b78d8

  • SHA512

    3be9e90c67ef641b94f81c86344082b63c690e906a1fed7825bb6a0321cd4c8289d8e64e9583897ce832cad137f475e66053ace4d43f2b6a741d33b3709ead91

  • SSDEEP

    3072:HemwkmgMXfbtdBE2a/duEx5cLbfu3/XcW5DC2kgZ8YfHcvOgbg8vW/f:HfmgMXfbtdK2a/dh5cLeC2kgZ8YfHcv/

Score
10/10

Malware Config

Signatures

  • Detect Xehook Payload 1 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • Xehook family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 600694fa52aa0bd711a6d564728931380bd29891fdf62c26b1f95224589b78d8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections