General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-20db32cac1686bbdbbbba1f7c3bc81cc48697ecb4cb9088bcbdb4c6fe99ae422

  • Size

    210KB

  • MD5

    e124c18174acf6a840c39f6747b5106d

  • SHA1

    dd5d7fbc33bff99afcf01e26e5efa45eec3cb6c0

  • SHA256

    20db32cac1686bbdbbbba1f7c3bc81cc48697ecb4cb9088bcbdb4c6fe99ae422

  • SHA512

    a1b44db0134a24f0b2501cd384d8f1abef7d528790b2018851ea4971aaf3004280fdaf82190c3ad62086c4dfe6dc3db77d5aa0ca34fdaca7b06245e4d3dd5010

  • SSDEEP

    6144:TG7u6jrkwvKaXR0cyYLF6lcBapBddvJF:K7u6jvnXRsLiATvJF

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-20db32cac1686bbdbbbba1f7c3bc81cc48697ecb4cb9088bcbdb4c6fe99ae422
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections