General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-422044343c24239638640735b9e54d9ed50f5e782f4db60da87e12deb8e61720

  • Size

    156KB

  • MD5

    bf1618f9d13f6014ff56ad1b4cc30a16

  • SHA1

    cb3a19a5294fdce43673acd664574060b92eaec5

  • SHA256

    422044343c24239638640735b9e54d9ed50f5e782f4db60da87e12deb8e61720

  • SHA512

    9c91695285fa7d4b5445ef4e73e430b163454d0d005c145b4474d5a2935bf16436c52af67c639b56fa7a42db6e50fb4a07d1805b9bf13c078a21c44a6f9e2bab

  • SSDEEP

    3072:VGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyX:VG7u6jrkwvKaXR0cyYLF6lcBapBdd

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-422044343c24239638640735b9e54d9ed50f5e782f4db60da87e12deb8e61720
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections