Supremo[.]exe | Triage™

General

Target
Supremo.exe
Size 13.5MB
Sample260806-dnl3safe62
SHA256 e5097b7be4bff6b0f8f231edb980693bd5bee728647c4e5eeb1c185d3f641668
MD5 64499b3adc45c1ecc49cc8ac699df892
SHA1 76bfaa2d545dd6da89ed2a8942d7b704081245d1
SHA512 d06b9bbe16eb2b3d95aadcfbf58089c2e4ce481dc3c5c90916f53bb15532d18b4e2b166ea10f06aeb8c35e48eb0e3d961392cf20a9b732b0b42d3c6b4aa1a6b2
SSDEEP 393216:CoGehmmz2x2hRVwKFiCi4b0k4P4VT3+s4uljE8I2rof9:yehmmCWDDgOT3sMjE8Ica9
TLSH
T1FAE633A053C05098D40E7AF00BD1542FB386EE59D4C24A279B563B5FFCFA616FF096A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Supremo.exe

SHA256 e5097b7be4bff6b0f8f231edb980693bd5bee728647c4e5eeb1c185d3f641668
MD5 64499b3adc45c1ecc49cc8ac699df892
SHA1 76bfaa2d545dd6da89ed2a8942d7b704081245d1
SHA512 d06b9bbe16eb2b3d95aadcfbf58089c2e4ce481dc3c5c90916f53bb15532d18b4e2b166ea10f06aeb8c35e48eb0e3d961392cf20a9b732b0b42d3c6b4aa1a6b2
SSDEEP 393216:CoGehmmz2x2hRVwKFiCi4b0k4P4VT3+s4uljE8I2rof9:yehmmCWDDgOT3sMjE8Ica9
TLSH
T1FAE633A053C05098D40E7AF00BD1542FB386EE59D4C24A279B563B5FFCFA616FF096A2
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

58078192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths