General

  • Target

    d3d53f9f2532b7fabbd75f06c46f9e53aae2b01a5455039375e58457118a9c8a

  • Size

    40KB

  • MD5

    4a5757268b4092888d356752f9c08c69

  • SHA1

    fe609e6a0b803a777cacd32313ab06ce36491293

  • SHA256

    d3d53f9f2532b7fabbd75f06c46f9e53aae2b01a5455039375e58457118a9c8a

  • SHA512

    06b9e9f6e6277438ebec6b856056b2a0deb2bb892ceae94c7f00bc8a50394939b7ee6b923998f5d2cb8442210324f0d02dac91092f0a16ea4d6f14ce3a2b348b

  • SSDEEP

    768:9h78qHxmftWZg9Ri+Asa1dTxoZ+AtmJ50aQPy71pVQB+DmgY4ziKfeoHvr0:/pRmftWai+A3Fx6+AtmJ50aQPyh3QB+2

Score
10/10

Malware Config

Signatures

  • Detected Xorist Ransomware 1 IoCs
  • Xorist family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d3d53f9f2532b7fabbd75f06c46f9e53aae2b01a5455039375e58457118a9c8a
    .zip

    Password: infected

  • 8fbb2c5c20d0a00d1c4ba43d5209e6e3871b98207b03f1aa7483476c1355a12f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections