General

  • Target

    4df8d69adada8cc13922b59f36705f4430d17732ab06f00e6bbc1c8b2cab9093

  • Size

    4.3MB

  • MD5

    8025a63b147775b4eb6a031923efdc9e

  • SHA1

    b70dc3e3fef190867286510f90f71b513dbcf902

  • SHA256

    4df8d69adada8cc13922b59f36705f4430d17732ab06f00e6bbc1c8b2cab9093

  • SHA512

    debe272f85d8ebf2e2d7056d2a1b4e4496d4bdaba14b3a2e00f0344e809e9a288877481217b54c699a493f52d4165587573a94854493c38139ef9456679958d9

  • SSDEEP

    98304:jYNZS3vsszf3UuqbUa3hTMHl0ylTIbUPGzDMGfZ+tuUpmQMa5:uS3vsszHoqF0ylEbx3MaZ+YUUja5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4df8d69adada8cc13922b59f36705f4430d17732ab06f00e6bbc1c8b2cab9093
    .zip
  • HEU_KMS_Activator_v42.1.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections