General

  • Target

    revenge.bat

  • Size

    211KB

  • MD5

    b4038412251e2209c8a0e5d1e5f9df7a

  • SHA1

    0b8c3aa5d2af9fbb5065c0cb993851a4c7e38532

  • SHA256

    08d46e97b3d3e5fc885ff54a08016a8e5c2b3915e399ae89d3ad1825cb3dd4f2

  • SHA512

    cf7052a2d770fa6f08a7211e88b718d14c8bb0958fa071ad9743d1cb81bcbbb25c8c136b74c01c8816c56d8f302baf12050be17a42c66e7dfcced78dafb87cac

  • SSDEEP

    6144:+sbRQo2B6qxFlU/KCrO6is0xO1L2rW5s/satpq:+ZolqxgK6O6iRO1qC5s/t7

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • revenge.bat
    .exe windows:5 windows x86 arch:x86

    Password: l


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections