Overview

overview

8

Static

static

8

查看最�...��.url

windows7-x64

1

查看最�...��.url

windows10-2004-x64

1

虚拟内�...��.exe

windows7-x64

8

虚拟内�...��.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Trojan-Ransom.Win32.AutoIt.wdq-76ca0e5993a818ddd6e2ef7d1fc625942792f44d9cb6062e2dd45e62b756624a

  • Size

    416KB

  • MD5

    365bb4fcdc6e1e50c325197ad558ba3f

  • SHA1

    5a250eb988762f4ba57d4b5d340277959dd74269

  • SHA256

    76ca0e5993a818ddd6e2ef7d1fc625942792f44d9cb6062e2dd45e62b756624a

  • SHA512

    4f570687685b9da71ee159ee5872c813ab59de2e1adf860b207b12292770be965e4db69db7085e12cccdca90e3b57135d0cacf28d1b38bf0b1e1f54dc1ff6a02

  • SSDEEP

    12288:AISVoJh5LOGJcQ0H4EKloo3ErO+MC3GD5Bk6LELcjxGqT7c:AIyo9d5SXwHv+MCQBks9dc

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

Files

  • Trojan-Ransom.Win32.AutoIt.wdq-76ca0e5993a818ddd6e2ef7d1fc625942792f44d9cb6062e2dd45e62b756624a
    .rar
  • 使用说明.txt
  • 查看最新版本.url
    .url
  • 虚拟内存转移工具.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections