General

  • Target

    4d633b0537d4af6c5e5447b5d27bc010ea5f216360f8097eacd11fd80455272b.exe.compressed

  • Size

    160KB

  • MD5

    203bb8e4e6e19afb9d300648a0d29d2a

  • SHA1

    7d0e4b48ec3fee57b7a26ecc01b3403a87c9a837

  • SHA256

    465f302c97b2fb4b405115ada022eea504eef77d35594f4472d4482a235faa1a

  • SHA512

    b756ad8f563f1e0609c6dcc6d2edb91003516cfe9cfb380c8c0694d642d61328f9d7e3e9b2547301ac23c0959d3a1f8d08f2dc029afd67ddde5c748dc1bf2905

  • SSDEEP

    3072:XFB3O3IRORghwODMJlz1dxoOXwupfOwIFIKmk/w3JgBhqkLZiufFCL:VBZcIDqvysbpfnVKB3qK+

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d633b0537d4af6c5e5447b5d27bc010ea5f216360f8097eacd11fd80455272b.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections