General

  • Target

    OxycoRat.zip

  • Size

    12.1MB

  • MD5

    af8b1a697daa2373b367a8b4354489be

  • SHA1

    06be7fb6ea6b27775df408e9f75f36073f1aa3cb

  • SHA256

    24e7bea644e79281019e4ec4af397a2ddb160e3879df58b5e277a04214bf9279

  • SHA512

    111e09665a49e4d6039d11b4cd695048be9ea6f0b465e4acde03fb3009f385ba32fc46008c11fa4a92a85e264f78627dcba4ac1d394e0f2cab21bf52774f554d

  • SSDEEP

    393216:9Q2WOG5ppSPxvFwbKAJ/EwSN+qe2OeYdkxXbdQ+KjsdG:G5pYPxS2NjNDe2OeY+xXdKEG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • OxycoRat.zip
    .zip

    Password: 123

  • Data/DataBase.db
  • Modules/ffmpeg.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    a05575a4ef06bc557b834a488509da27


    Headers

    Imports

    Sections

  • Plugins/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections