Overview

overview

7

Static

static

7

Potao Expr...C4.exe

windows7-x64

7

Potao Expr...C4.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    PotaoExpress.zip

  • Size

    23.4MB

  • MD5

    2677e57cd46328182af9ad3ea6dbe8d3

  • SHA1

    16977ed39c01cdfedf5363bc473d16cad6173e43

  • SHA256

    6b552cbb28bc63f034841ddeb188064fc770a82c44ce9b10992ed0597e31e35e

  • SHA512

    6be9444893e89501d823efc5231870da2535dcd3db5cb4bd881c612257e08995dbd330f950aa277fc636dd4adb9d8f84ac67c7c56695dac28a5e035a100d23e9

  • SSDEEP

    393216:Py3T9Ym81zJHC0x2EaxE6uEeAjqY1vt5Zbb2IycFu/pclFAMEdIcWFofdTmV8em3:63ym83tgxE67eUqqVbb2KFWSe79fZG81

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 67 IoCs

    Checks for missing Authenticode signature.

Files

  • PotaoExpress.zip
    .zip

    Password: infected

  • Potao Express/Potao_1stVersion/Potao_1stVersion_0C7183D761F15772B7E9C788BE601D29
    .exe windows:9 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:9 windows x86 arch:x86


    Headers

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_14634D446471B9E2F55158D9AC09D0B2
    .exe windows:9 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:9 windows x86 arch:x86


    Headers

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_3B7D88A069631111D5585B1B10CCCC86
    .exe windows:5 windows x86 arch:x86

    1b9b4e9f8473550d8843bf1ec474e2e9


    Headers

    Imports

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_502F35002B1A95F1AE135BAFF6CFF836
    .exe windows:5 windows x86 arch:x86

    38f4148665ca4dab151948b49b57dce9


    Headers

    Imports

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_85B0E3264820008A30F17CA19332FA19
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_A35E48909A49334A7EBB5448A78DCFF9
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:10 windows x86 arch:x86


    Headers

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_A446CED5DB1DE877CF78F77741E2A804
    .exe windows:5 windows x86 arch:x86

    84cf44102de4fa7a332463386ee841ce


    Headers

    Imports

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_AC854A3C91D52BFC09605506E76975AE
    .exe windows:5 windows x86 arch:x86

    779d35758196a6425692bc7afa50626c


    Headers

    Imports

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_D1658B792DD1569ABC27966083F59D44
    .exe windows:9 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:9 windows x86 arch:x86


    Headers

    Sections

  • Potao Express/Potao_1stVersion/Potao_1stVersion_D939A05E1E3C9D7B6127D503C025DBC4
    .exe windows:7 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:7 windows x86 arch:x86


    Headers

    Sections

  • Potao Express/Potao_DebugVersion/Potao_DebugVersion_5199FCD031987834ED3121FB316F4970
    .exe windows:6 windows x86 arch:x86

    d8fef9edcad453cc0c374b0775829a11


    Headers

    Imports

    Sections

  • Potao Express/Potao_DebugVersion/Potao_DebugVersion_7263A328F0D47C76B4E103546B648484
    .exe windows:6 windows x86 arch:x86

    d8fef9edcad453cc0c374b0775829a11


    Headers

    Imports

    Sections

  • Potao Express/Potao_DebugVersion/Potao_DebugVersion_BDC9255DF5385F534FEA83B497C371C8
    .exe windows:6 windows x86 arch:x86

    d8fef9edcad453cc0c374b0775829a11


    Headers

    Imports

    Sections

  • Potao Express/Potao_Droppersfrompostalsites/Potao_Droppersfrompostalsites_07E99B2F572B84AF5C4504C23F1653BB
    .exe windows:5 windows x86 arch:x86

    ec350fb3ad43ad5600ea3d14fcf75c12


    Headers

    Imports

    Sections

  • Potao Express/Potao_Droppersfrompostalsites/Potao_Droppersfrompostalsites_1927A80CD45F0D27B1AE034C11DDEDB0
    .exe windows:5 windows x86 arch:x86

    a9aba99e03845faab8cddded800bbfe9


    Headers

    Imports

    Sections

  • Potao Express/Potao_Droppersfrompostalsites/Potao_Droppersfrompostalsites_579AD4A596602A10B7CF4659B6B6909D
    .exe windows:5 windows x86 arch:x86

    92ba77217e91e7bde6ae349078237586


    Headers

    Imports

    Sections

  • Potao Express/Potao_Droppersfrompostalsites/Potao_Droppersfrompostalsites_65F494580C95E10541D1F377C0A7BD49
    .exe windows:4 windows x86 arch:x86

    9b48a7d3b265281039b65bcb806a662b


    Headers

    Imports

    Sections

  • Potao Express/Potao_Droppersfrompostalsites/Potao_Droppersfrompostalsites_A4B0615CB639607E6905437DD900C059
    .exe windows:5 windows x86 arch:x86

    6d2241eb90be26eac633c05553c52271


    Headers

    Imports

    Sections

  • Potao Express/Potao_Droppersfrompostalsites/Potao_Droppersfrompostalsites_E64EB8B571F655B744C9154D8032CAEF
    .exe windows:5 windows x86 arch:x86

    d422409758bf356eaafaed28a0a73e48


    Headers

    Imports

    Sections

  • Potao Express/Potao_Dropperswdecoy/Potao_Dropperswdecoy_5A24A7370F35DBDBB81ADF52E769A442
    .exe windows:5 windows x86 arch:x86

    8a93e150db8745ae3b407de57eaba3ba


    Headers

    Imports

    Sections

  • Potao Express/Potao_Dropperswdecoy/Potao_Dropperswdecoy_73E7EE83133A175B815059F1AF79AB1B
    .exe windows:5 windows x86 arch:x86

    541f8571e1633593d73c9704f161a022


    Headers

    Imports

    Sections

  • Potao Express/Potao_Dropperswdecoy/Potao_Dropperswdecoy_B4D909077AA25F31386722E716A5305C
    .exe windows:5 windows x86 arch:x86

    3260e5fff5886266a05629857462b73f


    Headers

    Imports

    Sections

  • Potao Express/Potao_Dropperswdecoy/Potao_Dropperswdecoy_D755E52BA5658A639C778C22D1A906A3
    .exe windows:5 windows x86 arch:x86

    3f5697fce2b5477c9a7e7bee5a88f3d3


    Headers

    Imports

    Sections

  • Potao Express/Potao_Dropperswdecoy/Potao_Dropperswdecoy_EEBBCB1ED5F5606AEC296168DEE39166
    .exe windows:5 windows x86 arch:x86

    8ab781448bc2f273a22a2c931b1ed6f3


    Headers

    Imports

    Sections

  • Potao Express/Potao_Dropperswdecoy/Potao_Dropperswdecoy_FC4B285088413127B6D827656B9D0481
    .exe windows:5 windows x86 arch:x86

    8ab781448bc2f273a22a2c931b1ed6f3


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptSetup/Potao_FakeTrueCryptSetup_83F3EC97A95595EBE40A75E94C98A7BD
    .exe windows:5 windows x86 arch:x86

    c2839c856fcebdb2f16e37942ae1f180


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptSetup/Potao_FakeTrueCryptSetup_BABD17701CBE876149DC07E68EC7CA4F
    .exe windows:5 windows x86 arch:x86

    16ae218ee39229e071a4eca0a757afbf


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptSetup/Potao_FakeTrueCryptSetup_CFC8901FE6A9A8299087BFC73AE8909E
    .exe windows:5 windows x86 arch:x86

    16ae218ee39229e071a4eca0a757afbf


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptSetup/Potao_FakeTrueCryptSetup_F34B77F7B2233EE6F727D59FB28F438A
    .exe windows:5 windows x86 arch:x86

    16ae218ee39229e071a4eca0a757afbf


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptextracted exe/Potao_FakeTrueCryptextracted exe_7CA6101C2AE4838FBBD7CEB0B2354E43
    .exe windows:5 windows x86 arch:x86

    17e2d845a4a591914df117cadfcaa45a


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptextracted exe/Potao_FakeTrueCryptextracted exe_B64DBE5817B24D17A0404E9B2606AD96
    .exe windows:5 windows x86 arch:x86

    4098b6f9029f52b0beb688b23e6d2f8e


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptextracted exe/Potao_FakeTrueCryptextracted exe_C1F715FF0AFC78AF81D215D485CC235C
    .exe windows:5 windows x86 arch:x86

    92b206cc4b926d6afd09c3335b1a6ad5


    Headers

    Imports

    Sections

  • Potao Express/Potao_FakeTrueCryptextracted exe/Potao_FakeTrueCryptextracted exe_F64704ED25F4C728AF996EEE3EE85411
    .exe windows:5 windows x86 arch:x86

    17e2d845a4a591914df117cadfcaa45a


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_02D438DF779AFFDDAF02CA995C60CECB
    .exe windows:5 windows x86 arch:x86

    e7fbb8c497d92f1f6ebab4219113def6


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_043F99A875424CA0023A21739DBA51EF
    .exe windows:5 windows x86 arch:x86

    9ffe655467145da5ed16f296022d5039


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_11B4E7EA6BAE19A29343AE3FF3FB00CA
    .exe windows:5 windows x86 arch:x86

    28160afac4b60d207256e4254513bee2


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_1AB8D45656E245ACA4E59AA0519F6BA0
    .exe windows:5 windows x86 arch:x86

    a9b1363a83d63d79d353b877cee7e5e1


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_27D74523B182AE630C4E5236897E11F3
    .exe windows:5 windows x86 arch:x86

    20e9cb8e133d2d906a4bb4ce70b26f17


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_360DF4C2F2B99052C07E08EDBE15AB2C
    .exe windows:5 windows x86 arch:x86

    28160afac4b60d207256e4254513bee2


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_38E708FEA8016520CB25D3CB933F2244
    .exe windows:5 windows x86 arch:x86

    33dcf253c46574ff95d3a6ebc6cd2ade


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_6BA88E8E74B12C914483C026AE92EB42
    .exe windows:5 windows x86 arch:x86

    0ccd2d423dfdb09fd81be9ae98a678f1


    Headers

    Imports

    Sections

  • Potao Express/Potao_OtherDroppers/Potao_OtherDroppers_89A3EA3967745E04199EBF222494452E
    .exe windows:5 windows x86 arch:x86

    a9b1363a83d63d79d353b877cee7e5e1


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_057028E46EA797834DA401E4DB7C860A
    .exe windows:5 windows x86 arch:x86

    1e81476a7ece76f166693566027b93b3


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_1234BF4F0F5DEBC800D85C1BD2255671
    .exe windows:5 windows x86 arch:x86

    1e81476a7ece76f166693566027b93b3


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_2646F7159E1723F089D63E08C8BFAFFB
    .exe windows:5 windows x86 arch:x86

    7d49c6380096d9d2548dbf3bb120d2ee


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_2BD0D2B5EE4E93717EA71445B102E38E
    .exe windows:5 windows x86 arch:x86

    ea28566f36e44d0f734b6bc1587bc9ec


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_35724E234F6258E601257FB219DB9079
    .exe windows:5 windows x86 arch:x86

    d09c5cff654ad336b562406337e1accf


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_3813B848162261CC5982DD64C741B450
    .exe windows:5 windows x86 arch:x86

    1e81476a7ece76f166693566027b93b3


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_39B67CC6DAE5214328022C44F28CED8B
    .exe windows:5 windows x86 arch:x86

    7d49c6380096d9d2548dbf3bb120d2ee


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_514423670DE210F13092D6CB8916748E
    .exe windows:5 windows x86 arch:x86

    ea28566f36e44d0f734b6bc1587bc9ec


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_542B00F903F945AD3A9291CB0AF73446
    .exe windows:5 windows x86 arch:x86

    da727c7f9f8154e6be5cbd0ae0dc3aa0


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_609ABB2A86C324BBB9BA1E253595E573
    .exe windows:5 windows x86 arch:x86

    a91ff54f95d9488aa57799c2d9a04ccc


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_76DDA7CA15323FD658054E0550149B7B
    .exe windows:5 windows x86 arch:x86

    d09c5cff654ad336b562406337e1accf


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_9179F4683ECE450C1AC7A819B32BDB6D
    .exe windows:5 windows x86 arch:x86

    7d49c6380096d9d2548dbf3bb120d2ee


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_A2BB01B764491DD61FA3A7BA5AFC709C
    .exe windows:5 windows x86 arch:x86

    1e81476a7ece76f166693566027b93b3


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_A427FF7ABB17AF6CF5FB70C49E9BF4E1
    .exe windows:5 windows x86 arch:x86

    d09c5cff654ad336b562406337e1accf


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_A59053CC3F66E72540634EB7895824AC
    .exe windows:5 windows x86 arch:x86

    d8e05abd5c33451d5d18fbe18bff746d


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_ABB9F4FAB64DD7A03574ABDD1076B5EA
    .exe windows:5 windows x86 arch:x86

    d354a61aaf104a5508f0209529f92de8


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_AE552FC43F1BA8684655D8BF8C6AF869
    .exe windows:5 windows x86 arch:x86

    a163e1178a2feb4fc26d4bec2e703914


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_CA1A3618088F91B8FB2A30C9A9AA4ACA
    .exe windows:5 windows x86 arch:x86

    1e81476a7ece76f166693566027b93b3


    Code Sign

    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_CDC60EB93B594FB5E7E5895E2B441240
    .exe windows:5 windows x86 arch:x86

    1e81476a7ece76f166693566027b93b3


    Headers

    Imports

    Sections

  • Potao Express/Potao_USBSpreaders/Potao_USBSpreaders_E685EA8B37F707F3706D7281B8F6816A
    .exe windows:5 windows x86 arch:x86

    bcbd39add4d26b08f01bb2d61c7e3d82


    Headers

    Imports

    Sections