General

  • Target

    startisbacktr.exe

  • Size

    628KB

  • MD5

    71352732824b439eb88fa64447a3bc83

  • SHA1

    5b698b10e49ee5a7a175316ddcef3f0db95270a2

  • SHA256

    5e52e28cf34bd26d9cc15d907b5e6b1b9abd9ddc5d0591ece524a9c44270b03f

  • SHA512

    8a156c9d46c7d701ab03e0ed567f5c39ce874296bc3fb0a9b3aef37d36508bc901a632f4bd8729bc051e456fd29c332daf979c495e1806c857cf820185c180fa

  • SSDEEP

    12288:Z6Wq4aaE6KwyF5L0Y2D1PqLzfvKdk3sOxyqSdiut2cxz+I4on+ET8ArX:vthEVaPqLjyws7GkyI34Az

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • startisbacktr.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections