General

  • Target

    3206299e4de9aea7a8949bfc1ffdcd4b0379cdc9bb0ac99411dc509c676ef3ed.exe.compressed

  • Size

    160KB

  • MD5

    3a1c7997573ad392686bb2931b3d38c4

  • SHA1

    b51e9197cdd026c340d3bbfc4aa8d54b5ac9ac85

  • SHA256

    173453674bde0d5a7614bc9c04797a8f89e7891b3e255b80776cae97bee2be08

  • SHA512

    ede1eee1199a332fcc4fcd9fab32a8da985dea883660edad3c8f0a5ca9f6c35f08926dc3b24997417aa32e231c73e25ecc84734d69c8096704cb0cef757ed7d4

  • SSDEEP

    3072:NFB3O3IRORghwODMJlz1dxoOXwupfuovhxo7cqWt75pLX/N3VO4p:/BZcIDqvysbpfu+Lxn5XFr

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3206299e4de9aea7a8949bfc1ffdcd4b0379cdc9bb0ac99411dc509c676ef3ed.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections