General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-86653b83731590634269a2daf644f2c76f6e769033d72372819a963f48e369d1

  • Size

    156KB

  • MD5

    5e4d96a517484656f06c28d2d403442e

  • SHA1

    f9cb2d61a7779a622583addf1feb91a8629bccca

  • SHA256

    86653b83731590634269a2daf644f2c76f6e769033d72372819a963f48e369d1

  • SHA512

    12bd8f6ac99520514d9b7d685abf32e132d56652cdc28490480c2e119e86aa86ee7e4aaaa3fd4eb99f9bff3635949fbf95829fb93b75ee8e28d9adedac6f17a9

  • SSDEEP

    3072:KGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyX:KG7u6jrkwvKaXR0cyYLF6lcBapBdd

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-86653b83731590634269a2daf644f2c76f6e769033d72372819a963f48e369d1
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections