General

  • Target

    3008269becfa60dbe80e1486a22c1902de5caaaf2e1a3de51725967df733802a.exe.compressed

  • Size

    160KB

  • MD5

    790fe44b23470777d2e930dda44b971d

  • SHA1

    14d75c15b7319fe5a3dda4b02a18ff75a7ba84a6

  • SHA256

    57c784c1b15ebae3f975c30a8beb4091c3f847c41c3f34565e3314ba29a2aaf1

  • SHA512

    8ff86cfe5f595f0af0d1ed4450d1cc952e718b58f0277264f7853114dfe76971b17d760cf24a484469d5f75b4460f7f3878040af0438d1e01cc00df03a6d004a

  • SSDEEP

    3072:eFB3O3IRORghwODMJlz1dxoOXwupfzmt/EI7+Pyha/afPuoSZrGEA6k:QBZcIDqvysbpfK6IaPuas

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3008269becfa60dbe80e1486a22c1902de5caaaf2e1a3de51725967df733802a.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections