General

  • Target

    15072024_1321_P O.r11

  • Size

    614KB

  • MD5

    5e326f804f3a9483836831b694491f75

  • SHA1

    cbbb3c687fd05bd38d864bcbb4fad39393a7e716

  • SHA256

    4b6b220c5834ddb07a08aa3e6c26f7c389f8d344fa19981f023b63b67d55d8b8

  • SHA512

    5a8c3865ebc1588f4fa48325ad991199be360f82fd70ad026e19c58edebd808b336dbd23a29ab248198b57fc85999b73a1b6ea69f674b07a12e0025a254fc46a

  • SSDEEP

    12288:zu2NcKpWtwFKEgrGR8Z6FN0V6LlLwEeRQjqHcfw/aKyo:zu2N/pQAKEKg8Z6FmwLlLw2jq4q

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 15072024_1321_P O.r11
    .rar

    Password: infected

  • P O.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections