General

  • Target

    528affc8eca94d81446ec5b22320d5f7d59979a1989f0d1cac54a59a6ffba6fe.exe.compressed

  • Size

    160KB

  • MD5

    98c4d6cd36c6e2a7227bbe6523608686

  • SHA1

    7653e8790959e1c998e11e2a6293a4bb584e05ef

  • SHA256

    6c717bd5c4d8147492fd892192885511003281793d46abf0063fb8e7be14769d

  • SHA512

    dc39da2670c5e900ebcb3e53b061c240354c6bc90eddb3ecd32664e526d173120c30818197977ce92adb31f0dd79e6e48d9010af92210e996763e43d13b0cef8

  • SSDEEP

    3072:bFB3O3IRORghwODMJlz1dxoOXwupfWvsSQl7PnZ0rJM81SDRHKpfKaCpZ7l:JBZcIDqvysbpf6QtnZ0r5pA

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 528affc8eca94d81446ec5b22320d5f7d59979a1989f0d1cac54a59a6ffba6fe.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections