General

  • Target

    mbrlocker.exe

  • Size

    7KB

  • MD5

    61dc75a6465bc7582f873b554fcb1b6a

  • SHA1

    9dcfd74bcb873ddb4ed65ea234140f33664a9ff2

  • SHA256

    eaad06b4a7b1072a3e7e361638e75ffc18d81e17d8a443b511b77162fe4251a3

  • SHA512

    457ae5e5315645f8d496fe4066f2487f8e17372f9225b648498b5444b9f13ed1b7768a773c37153cf32518ec102d2c8c5f3f89f7d760a81ded9bc96848834f1a

  • SSDEEP

    96:lrZhl8wdS+r3yOYW189fTwUVF0CWHyjk8P1LOmjXfihExs2VKi6oWd96OGMUA:Nzdrr1FG1WDCgmjPZHT/OGMUA

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • mbrlocker.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections