General

  • Target

    a15af725139c7d89cbf32a7e344e3b369f130b2c81ebeaee135edcf28c0b1a1a.exe.compressed

  • Size

    160KB

  • MD5

    be41a64c3178aa8013f509ba431ac98f

  • SHA1

    bceea426f4504aea3ce89c5bd033b448302a4511

  • SHA256

    6f57113043ab732f76d4db7e33d7d49aed12ed9a1c9666c723c5a9fd9debe5de

  • SHA512

    44f2d2fe9b1cb9df199e5b987600145a7e019993b0a0c9aea7943e6309bd8902c7c67bf217d374ca2dfdb145fe4b6529173d9f5a2079219945300038fffa9ffa

  • SSDEEP

    3072:DFB3O3IRORghwODMJlz1dxoOXwupf4iMfych4iyDB2F4N3Od:BBZcIDqvysbpf4ND43i4U

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a15af725139c7d89cbf32a7e344e3b369f130b2c81ebeaee135edcf28c0b1a1a.exe.compressed
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections