General

  • Target

    60d1b7c6e4a82d5e77649937d790bd203b8b1c9fb10f8b8f82ca78dc2da59e88

  • Size

    4.4MB

  • MD5

    befd1e26f6ffabe22fd476225b7181fa

  • SHA1

    f144fc35f0e806653bd596d1b8fe4b779a3b242e

  • SHA256

    60d1b7c6e4a82d5e77649937d790bd203b8b1c9fb10f8b8f82ca78dc2da59e88

  • SHA512

    1d13efa4beb0d4beacce7abfcbda1ff6d9a6d66742840fa4bc447dc0f916debd7f651db053ae21548e793ef65dd5a6cb0ff41e7c385c2947a2c91fd744c0689b

  • SSDEEP

    98304:PoBfv+k049ySg56O7Y2hdCPnK0oU9qPib5wGfZGrAi9K+a62:PoBX+k/9yXYURhdCy897twCZGciMx62

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 60d1b7c6e4a82d5e77649937d790bd203b8b1c9fb10f8b8f82ca78dc2da59e88
    .zip
  • ???@zbezj??UP?Francis_AMD??.txt
  • HEU_KMS_Activator_28.0.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections