General

  • Target

    698fd94b0f53e73eafdd8e7c8a86f098bc9103eda3ba8ad05fcdffbf518a397b.exe.compressed

  • Size

    160KB

  • MD5

    cbc2ca330ce52e7acf3de51ef89e3149

  • SHA1

    b49d21a4e20ade3e77f1e00f604977e4dff8363f

  • SHA256

    ed35f478a07958d8635f6f25c3ca5a1efba43953efd9940e375c35090839088d

  • SHA512

    9a9b2d630ed325f69dfd239f6d4cca5216bef6d263debf6525e3df8afb549dae15dfd1cd4c0d23a0a5199a8390fc783a055b5089c5949731bd5361fc583e8838

  • SSDEEP

    3072:4FB3O3IRORghwODMJlz1dxoOXwupfAvQlD+T9P4WsIPSyiEcCPyrhu:mBZcIDqvysbpfAvQF+RP482Jrw

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 698fd94b0f53e73eafdd8e7c8a86f098bc9103eda3ba8ad05fcdffbf518a397b.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections