General

  • Target

    792073e71988f07d1c352ccc9c5c96a89459e5af2c935202abe1ca423cc80f8cN.exe

  • Size

    994KB

  • MD5

    f751a2295024cb156e021fee9c86df40

  • SHA1

    a0cee6ec85b8a3d13e002a42424a7076748dff20

  • SHA256

    792073e71988f07d1c352ccc9c5c96a89459e5af2c935202abe1ca423cc80f8c

  • SHA512

    38dafa748a3d9b14a070f63b100975702012cdcf78d83d12af6e2bf0eb809b98ed1be5926c836dafb433bc1df22fdeb0f6f79017dda2fbdccdf08df8733c9f30

  • SSDEEP

    24576:+MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxe:7J5gEKNikf3hBfUiWxe

Score
10/10

Malware Config

Signatures

  • AmmyyAdmin payload 1 IoCs
  • Ammyyadmin family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 792073e71988f07d1c352ccc9c5c96a89459e5af2c935202abe1ca423cc80f8cN.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections