General

  • Target

    29082024_0117_27082024_Facturas vencidas, 006598, 0099, 00976, 009668, 009678, 0056598433.uu

  • Size

    663KB

  • MD5

    1d852387485e68a25cfc0b831e2b6b15

  • SHA1

    7ccb9286e9615a3c01593c2302bb5687c7ebde03

  • SHA256

    ddf6dcc15b62a21fca677ed6cb0f6e9047b13caa6ade2d25b7c9efa48e1e2a30

  • SHA512

    d13815892f79860683e6aba2d4e69f080b195a1ce8e6c6bb86ccc8bb389173d552f588159391eb1fbcff96674c3d7dea037f3d24d04f60bce7e13f455e1961dd

  • SSDEEP

    12288:LWP/4SZRaKnB0zlkQcJqCIAE/zp2W4nsc3mJ+qot2drOX1bpvgUhYqNKOKOc/Y:iHKGOJPS092W4aJ+q6X1baAMBOc/Y

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 29082024_0117_27082024_Facturas vencidas, 006598, 0099, 00976, 009668, 009678, 0056598433.uu
    .rar

    Password: infected

  • Facturas vencidas, 006598, 0099, 00976, 009668, 009678, 0056598433.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections