General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-a2a48a79734df7a9dad63b1a4689cf15024baac618ac7424ee8e1161a885da6d

  • Size

    156KB

  • MD5

    8b876bb1be5c61700aeee84fae79a4c0

  • SHA1

    5529b44db7ebc135aab3a54e0f613cc14847e3d3

  • SHA256

    a2a48a79734df7a9dad63b1a4689cf15024baac618ac7424ee8e1161a885da6d

  • SHA512

    81d938e6afc7dcf5ead1e13ae7279062a0566739ed0b43ff6dc646c2f9ba793c637df01d66413b85f3f9cbb30cc3f5b467aeb1d6263c618ead25e8cea7631023

  • SSDEEP

    3072:xGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyX:xG7u6jrkwvKaXR0cyYLF6lcBapBdd

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-a2a48a79734df7a9dad63b1a4689cf15024baac618ac7424ee8e1161a885da6d
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections