General

  • Target

    110a2f5be65ccd94f2a0c4839beac53f33eeb19f9cce60ea3a68a051d752d3e4

  • Size

    585KB

  • MD5

    393c39b69a84d81734b258fecb147563

  • SHA1

    55981e5ee3f2b13182470be986cb65f2f2be57f5

  • SHA256

    110a2f5be65ccd94f2a0c4839beac53f33eeb19f9cce60ea3a68a051d752d3e4

  • SHA512

    e971c934c8614ffa677c561d95dc31b1c2ef2096426262d9faf387faf730dde6c245c1f97e810bc6f728040701aeb956b478c5c606e4d6c5ba8f19ca2a03e7c5

  • SSDEEP

    12288:FfaOwUqRN56EhmLsYI2e4r6YAy/2CcfwaMFZpeyHSgt5n/1ohxxGZ:V0T56EhGsyvWYAy/21fOZhbnNohLY

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 110a2f5be65ccd94f2a0c4839beac53f33eeb19f9cce60ea3a68a051d752d3e4
    .zip
  • PAYMENT.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • __MACOSX/._PAYMENT.exe