Overview

overview

10

Static

static

10

5a06da89d6...27.exe

windows7-x64

10

5a06da89d6...27.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d92bfa7fbd7f110fcd34314fd08f05a7.bin

  • Size

    215KB

  • MD5

    91a7dc533505bd35ebfb2ee8b49c639b

  • SHA1

    c112ee421fcde4845f933cba1488199aeb6bd271

  • SHA256

    14bc37ff1b252a72b518c0d2ebb12bbfd71716ba087e3a709e23587905afa68d

  • SHA512

    a68bd5360f60ced8d383df279a193f22bd6d472408521336760fc0f1c8ceaa38d81c9f782ebf07afa8a7ba5bb53a4ef557ab2263e276bc684c988b4f94532849

  • SSDEEP

    6144:aOvbSWTcnelP2IkpYmxvrYnr85O0ExzoyMXLpib5w:aOTClD288vhIbpib5w

Score
10/10
upxremcos

Malware Config

Signatures

  • Remcos family
    remcos
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d92bfa7fbd7f110fcd34314fd08f05a7.bin
    .zip

    Password: infected

  • 5a06da89d65a9ee2823551d73c4fe1fd59c0eb8109089d3c6d9c355dd2d64127.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections