General

  • Target

    Trojan-Ransom.Win32.Blocker.hrft-5801b953d771af5f71d5f972cc9143b49116a562b7e3c884cca167dac043cc3d

  • Size

    339KB

  • MD5

    7f193864875f86617fb274d491605645

  • SHA1

    1374a7958b0c596edea03f681402fd3103b233ba

  • SHA256

    5801b953d771af5f71d5f972cc9143b49116a562b7e3c884cca167dac043cc3d

  • SHA512

    059bb16deb70152c58314381102dd25e52f53090fcf5f88430bbe953df4e686ee9708316de52944a02e002b7fb99ccc70fa6a2413fd5907d78d52891fcb16492

  • SSDEEP

    6144:AUxA/K7GWMXqLj3BtP6J6TCDEVERm6m35RAzi702eOOaQ/hluADpfO:AUxseGWMXOttP60CDmI9651702eAufO

Score
10/10

Malware Config

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.hrft-5801b953d771af5f71d5f972cc9143b49116a562b7e3c884cca167dac043cc3d
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections