General

  • Target

    HashIs-5ca36273f06f80cd1b8aebcdb921fa8a44e1b66cf94fb48a44220feaa51be85b

  • Size

    995KB

  • MD5

    d8fd463f5ac1a9f91c1348dce1b9c0d0

  • SHA1

    87a51b2806a844260a33e36bb7ec481713fd0d73

  • SHA256

    5ca36273f06f80cd1b8aebcdb921fa8a44e1b66cf94fb48a44220feaa51be85b

  • SHA512

    ccace492f2ffd44c239b8d9bb06febe5d0c8ec3573e072e5256b448bf53de2f3e91fe001250609603c84f3da9f8cd1ffa202356fe74e5607e358984c183fa473

  • SSDEEP

    24576:rMjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxo:mJ5gEKNikf3hBfUiWxo

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HashIs-5ca36273f06f80cd1b8aebcdb921fa8a44e1b66cf94fb48a44220feaa51be85b
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections