General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-7d681b78bcc8230fd45ce70852a2b24ae894114f096fbc72288219f87923f15c

  • Size

    207KB

  • MD5

    0cd4ad84e46758d092bda3be86000b71

  • SHA1

    c05617c957f10dd99e2f792b78d87e5a08d56fae

  • SHA256

    7d681b78bcc8230fd45ce70852a2b24ae894114f096fbc72288219f87923f15c

  • SHA512

    7e547783156d987e410f7991857327a015d6c73545f2bf703b8b32346041ed63b39ef6806790d5ecd56b0b9aede868b613f500ea1ba41f25a6840676dac2703e

  • SSDEEP

    6144:FG7u6jrkwvKaXR0cyYLF6lcBapBdd2id:07u6jvnXRsLiATNd

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-7d681b78bcc8230fd45ce70852a2b24ae894114f096fbc72288219f87923f15c
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections