General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-546f85d60d482c97b9327d84d97fd9c93c1971a9e0663588a013e37e086abe10

  • Size

    206KB

  • MD5

    be5b9fba4d94ecc4bc50f9376da466d8

  • SHA1

    bb7bc7133f67c2dd49c6c0f87d3dfbc526b7102d

  • SHA256

    546f85d60d482c97b9327d84d97fd9c93c1971a9e0663588a013e37e086abe10

  • SHA512

    30ce62778b71f9307cb4d2ddf76b760691b24dbd564000dcfc1da5a0819f1815b8ecb07950d3f575962ef791210c3e293e1229a08aea6509393f65ae40699d29

  • SSDEEP

    6144:dG7u6jrkwvKaXR0cyYLF6lcBapBdd29d:c7u6jvnXRsLiATqd

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-546f85d60d482c97b9327d84d97fd9c93c1971a9e0663588a013e37e086abe10
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections