Overview

overview

9

Static

static

8

Boleto6002842.exe

windows7-x64

9

Boleto6002842.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.AutoIt.ig-5390e6db27e5817cf38b995dd6f976172db4ae68a295d39b2abf9672354e6b78

  • Size

    325KB

  • MD5

    4d8e6f0898ca9198dd002c585dbf3e12

  • SHA1

    50ee79b57f965854dc6ee7a9763b36c188b2736b

  • SHA256

    5390e6db27e5817cf38b995dd6f976172db4ae68a295d39b2abf9672354e6b78

  • SHA512

    26814b87e2b6e6842048dd7ffa138f01723ed2670eb23a13107adc0cbeb9fbbbe0107ab76e47c57f8e5c99cd7d83cc3cc20c64b7a8009ceb10bbd7215afbc8d5

  • SSDEEP

    6144:C+tNCEI9ie+HEauPcZnbQDutDUoUNEzOkmK9btiuVPkhj:C+mEI9inruUZnbQDutooUNuObK1tiQPw

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

Files

  • Trojan-Ransom.Win32.AutoIt.ig-5390e6db27e5817cf38b995dd6f976172db4ae68a295d39b2abf9672354e6b78
    .rar
  • Boleto6002842.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections