General

  • Target

    08012025_1416_NOGHCV09872.cmd.zip

  • Size

    631KB

  • MD5

    ae1bd1e06ff88c9756533df7e75a06aa

  • SHA1

    17e532f821d219bde8615d1325d71a7709b6cbd0

  • SHA256

    c675632edea307355c72ddcc06979b9bd2917fda95ee46e15e1bd58ebb67de8f

  • SHA512

    d952ffc5afce04355880e3bd23598d0e70c424b94aeb4bbf0fd5c9517e6c36c67a304493c02420faae0acdefe38bc82807add2641ef1fc57f1d45ae2c0c727f9

  • SSDEEP

    12288:JhOFpVmWTu/8vZLPocZNy+/wcx28VX64RnYpE1p9WLLWzlejY24UcQCrlX98kzZu:J0wUt5P5tBxRqqIbnLc2vtCrc+4

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 08012025_1416_NOGHCV09872.cmd.zip
    .zip

    Password: infected

  • NOGHCV09872.cmd
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections