Ransomware[.]Win32[.]Crypt360[.]zip

General

Target
Ransomware.Win32.Crypt360.zip
Size 550KB
Sample230331-v56l7add6x
SHA256 f4d054949f5c075827e9e9d1ad82231adc9f0af9e64637927e967ffddf1116cc
MD5 acb6b05000e9d999f24fb96d1420fa5e
SHA1 c5c3c0019ef82987ac9e136957cc2d2e405f9272
SHA512 1467122e938c5ab26e8379f047ec5decf8ba23b11c6c19f2570dea469ee9f03287423ea44636051a32bf7cb561ffdbd8c8ac5cc79b2a6d854aa08efdec7f946a
SSDEEP 12288:ZDepED/3KBa+KZviesWSAL2jJl3Ey5QWSOUeKIp8dV2zsb:ZDepU/6YBZleY2tl3sIpGV2zg
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Test	upx

File Explorer

Ransomware.Win32.Crypt360.zip

.zip 550KB
Test

.exe 563KB
out.upx

.exe 1.5MB

Ransomware.Win32.Crypt360.zip

SHA256 f4d054949f5c075827e9e9d1ad82231adc9f0af9e64637927e967ffddf1116cc
MD5 acb6b05000e9d999f24fb96d1420fa5e
SHA1 c5c3c0019ef82987ac9e136957cc2d2e405f9272
SHA512 1467122e938c5ab26e8379f047ec5decf8ba23b11c6c19f2570dea469ee9f03287423ea44636051a32bf7cb561ffdbd8c8ac5cc79b2a6d854aa08efdec7f946a
SSDEEP 12288:ZDepED/3KBa+KZviesWSAL2jJl3Ey5QWSOUeKIp8dV2zsb:ZDepU/6YBZleY2tl3sIpGV2zg
MD5 SHA1 SHA512 SSDEEP

Password

infected

Test

SHA256 c3f3659442a27afa1a9e8cbc18479f9c88e209b0429b30b695085746f1edb39e
MD5 fb8898216510c6af50a7aa81e23c35cb
SHA1 41d42f120ba66bc69efb3a2e1af47e197242f3a2
SHA512 bd91d17213daa08918998e1352893cf94e36e1c2d7e6008b59c71bbdcbd7b7b58c1c8accc7b561c0e9421c0fe133fa3af131bc2f9ccbc411c38a7c4680851402
SSDEEP 12288:jXLRoysOFO0XmyVNpCwSnDTWm2kqvqSfyqMFIoiBrRR0GPJT1QxC:jXLRhFC8m2v5GIoiVRRnuxC
MD5 SHA1 SHA512 SSDEEP

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

1654240

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 bf06ecd0fce7fdcf3a41ac0a7a1851822a10d0fac89cf5f1d65999e2cb4b4456
MD5 07c9e88bc72837585941392ff829bed2
SHA1 5a9c8eb10298b6e3496574d31c34511004aa23a3
SHA512 529103816ff9f651a85cc9c4fd88502c5001a8972a78277c0aa5d56f22f1224b44c291ecc1924e01b9a44a87ccade042622b54d6c7b96a62f386802fe50d0986
SSDEEP 24576:GXF3Rz8qzkMdd8HGTM8JK3cFG4ggdwW4wr5+Peob55MhtrYuluLZHrZ:Oj4c84OW4wNRgYhtZlutHrZ
MD5 SHA1 SHA512 SSDEEP