General

  • Target

    Trojan-Ransom.Win32.Blocker.jzec-aeb13b3c05ea47fa57f47b85dbd7cb114892f627c9d341b4bab780e4c5fb3f81

  • Size

    156KB

  • MD5

    259368d9beeb303f78b4feef63e65379

  • SHA1

    922d91e15e82935e7f6e69cd626504a0f4626fd8

  • SHA256

    aeb13b3c05ea47fa57f47b85dbd7cb114892f627c9d341b4bab780e4c5fb3f81

  • SHA512

    3e070dcdf9ff07e50d1b679efe2c7485b24604fbc9f2815d5dced00d9eb1ffae93bf4f4ed348810918f43f9a91f4150fde37b732733fc49c0ba4a10edb91d8c2

  • SSDEEP

    3072:eGbHwx3GsAFyQbXO0kwXmFRqAh+7QouCv8BATTy+zL9GwqRlcBapeEdmIMyXMd:eG7u6jrkwvKaXR0cyYLF6lcBapBdd8d

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • Trojan-Ransom.Win32.Blocker.jzec-aeb13b3c05ea47fa57f47b85dbd7cb114892f627c9d341b4bab780e4c5fb3f81
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections