General

  • Target

    92b2a28b95df399070a8bb126208acd1c49c5ef22a81b316f30de1a0bdf85e1c.exe.compressed

  • Size

    160KB

  • MD5

    d7689dbf49b2eb6d046b5d3db34710a2

  • SHA1

    526d70f2ce7e5a0c7104166296fae33f0845ba0d

  • SHA256

    31f571345952e25d1a729d45e495bf0e2760b8e2e142fff4fc12723cb687fd3c

  • SHA512

    f4838b09c3a3059b1907768a7af7e082b4483c7be065c9575e76aad901cab3a4e050bfd518a88a50ad2018c4d29c606b4e4b6fbf4982b411ecd37029066205e0

  • SSDEEP

    3072:YFB3O3IRORghwODMJlz1dxoOXwupfql2AGZ30r/F4RO+XRsd9Oeg:GBZcIDqvysbpfi2DEN4WU

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 92b2a28b95df399070a8bb126208acd1c49c5ef22a81b316f30de1a0bdf85e1c.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections