General

  • Target

    20092024_0140_17092024_comprobante_swift0000099.uu

  • Size

    812KB

  • MD5

    20abeae52a48206210e167065304b09b

  • SHA1

    7eac10701418a0d95483487293f8efba309b17bb

  • SHA256

    684729b66bdeca51b3e40486a241ad0f2c6312fddf84b0b04a1300a8171cf658

  • SHA512

    02ad96db39b70ab4708b793f17b9750db9877886fb82a585dc013ac61aab7cd590522d3f872a2ee2600a92d7ac8d18006f2120efdac141d1182ef750ae474a77

  • SSDEEP

    12288:gTr/vdlbDnT0cudvkUeJ6N6XK324SWjWLnAexmoTEHWEiFCHVqdkXoP2ZxoVcMYo:Er/llbDMdvhq6G427TgWP8YkXQncDo

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 20092024_0140_17092024_comprobante_swift0000099.uu
    .rar

    Password: infected

  • comprobante_swift0000099.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections