General

  • Target

    450ffb3790bbaea8cc1179c5e33d84b0N.exe

  • Size

    955KB

  • MD5

    450ffb3790bbaea8cc1179c5e33d84b0

  • SHA1

    65adb26271fd7862684250ad492d00969b75aed0

  • SHA256

    afde3e86b1c480c1a2445978cec52c7a0174bf39c77384aa778eefb279b60ad6

  • SHA512

    c63803a4d84a74c930cd905078ba54ad95156f506b2f68338ac19797d0c9ca7d9620c6ce807a19233fe24bc93e6bd7e7de9075659a13a729454599eeb8328426

  • SSDEEP

    24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxa:mJ5gEKNikf3hBfUiWxa

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 450ffb3790bbaea8cc1179c5e33d84b0N.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections