8447cd76c56cb7c13dc31d3aaadff615[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

8447cd76c56cb7c13dc31d3aaadff615.bin
Size

16.4MB
MD5

92174f4bcb86221ee608917923d94dae
SHA1

7e5a4d2c68e204e3f5de4d8556c1a3cb941b3e2d
SHA256

b85e59758c47baf143b97d5bfd523c9a5a7a2d9f82c2f0ba0150ed2172d8e656
SHA512

9567a824ba703c11abbda2a663de959f8e87a07af891a043ca2ba48b7a83560f2970167bb07c1b62994e5eeedfeb480e204d464a3718103a4b2b9e2caec1618d
SSDEEP

393216:WoU2PIUCHJFPKiCqstyWY5UoPT+/HJ1FDXwLIUHxVQ9YC:7UJHJFuqiyW3/HJHDALIURyaC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
static1/unpack001/413af64238d7985f1749cb5903bac8e17a58d37408488992d40247b42fcffbc7.exe	upx

Files

8447cd76c56cb7c13dc31d3aaadff615.bin
.zip

Password: infected
413af64238d7985f1749cb5903bac8e17a58d37408488992d40247b42fcffbc7.exe
.exe windows:5 windows x86 arch:x86

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:30:20:eb:3c:f0:a0:af:7d:bd:41:e2:b2:73:e8:a9
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-02-2021 00:00

Not After

28-02-2022 23:59

Subject

SERIALNUMBER=5167746364693,CN=Remote Utilities LLC,O=Remote Utilities LLC,L=Moscow,C=RU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025255

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:a4:a6:ed:54:83:04:8c:84:2d:02:a0:56:f4:2e:2e:cb:86:f0:f3
Signer

Actual PE Digest

c6:a4:a6:ed:54:83:04:8c:84:2d:02:a0:56:f4:2e:2e:cb:86:f0:f3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 20.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

08:30:20:eb:3c:f0:a0:af:7d:bd:41:e2:b2:73:e8:a9Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

c6:a4:a6:ed:54:83:04:8c:84:2d:02:a0:56:f4:2e:2e:cb:86:f0:f3Signer

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 20.0MB

UPX1 Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 15.3MB - Virtual size: 15.3MB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

08:30:20:eb:3c:f0:a0:af:7d:bd:41:e2:b2:73:e8:a9
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

c6:a4:a6:ed:54:83:04:8c:84:2d:02:a0:56:f4:2e:2e:cb:86:f0:f3
Signer

UPX0
Size: - Virtual size: 20.0MB

UPX1
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 15.3MB - Virtual size: 15.3MB