General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-21bd4e52c562cc9d79fb28b18482d5d77df2907864dca584c6618e41144dbe80

  • Size

    156KB

  • MD5

    b0c6883e36c7f5c7a0db7f097f87dce1

  • SHA1

    0801cb1e8c4756a0e5675c41c6c9705bf7f0182e

  • SHA256

    21bd4e52c562cc9d79fb28b18482d5d77df2907864dca584c6618e41144dbe80

  • SHA512

    fea1e33b6bec34c6f00558eafe37749905c53346c1c8eb0ce565b95e7d3d9bd6709d48da27d3ee8fd0cb18135a56edd166e8c1d452681fa89b2a9466e00cef1f

  • SSDEEP

    3072:iGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyslBOY:iG7u6jrkwvKaXR0cyYLF6lcBapBddsDP

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-21bd4e52c562cc9d79fb28b18482d5d77df2907864dca584c6618e41144dbe80
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections