General

  • Target

    12082024_0837_11082024_PI0987650002924.doc.tar

  • Size

    628KB

  • MD5

    eb2a4eb4d3198c7a85016b636dd2f2d9

  • SHA1

    40fb64b2b3e73923bd63e213528368971e2eabae

  • SHA256

    f1f673b26471bdd27993698953710b54969d6aaac3113a69969dfccfcedb6766

  • SHA512

    fcc31097f8134a999a538c77634168f89ff967ff8e2c3541a4d29fc424a3131255c14b2e5241f536d92823ce2f565b665f6df51712270dc35e9f283a472700ca

  • SSDEEP

    12288:bl0YLi48HMYVtgwvp9m0Hn28gDa2FQfoMzO3ryoiZbwYnx:Z0GStgQm0HnP+a2FQQHa80x

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12082024_0837_11082024_PI0987650002924.doc.tar
    .zip

    Password: infected

  • PI0987650002924.bat
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections