General

  • Target

    2024-05-12_49b801be856a9a21ba43f4c9d28c3d6b_ransomlock

  • Size

    172KB

  • MD5

    49b801be856a9a21ba43f4c9d28c3d6b

  • SHA1

    4ac45075974c186c5e8f9a267bc37c34915ce309

  • SHA256

    1b75fe5875db665196e91dd7ef204eddae9185e8beb0e5b5ad79a44124f7df19

  • SHA512

    4ad5f5c96a33c29603980bf279baf4aa4b10dffafd3e35b037995fad5122c5843627f992586f964a768f9b61205aaf45fff1a5ff6a67817f5fc4e541545546de

  • SSDEEP

    3072:HPbK7UKAgecpy2NyFwtTJ9Bvd1tOyna/D:vcbeky2NYWfNW

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-12_49b801be856a9a21ba43f4c9d28c3d6b_ransomlock
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections